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FOREWORD 


This report is one of five documents covering the results of the Space 
Station Crew Safety Alternatives Study conducted under Contract 
NAS1-17242. The study documentation is designated as follows: 


Vol. I - Final Summary Report (NASA CR-3854) 

Vol. II - Threat Development (NASA CR-3855) 

Vol. Ill - Safety Impact of Human Factors (NASA CR-3856) 
Vol. IV - Appendices (NASA CR-3857) 

Vol. V - Space Station Safety Plan (NASA CR-3858) 
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1. INTRODUCTION 


-CONTRACT HISTORY AND BACKGROUND 

The operation of a space station Initiates new Issues regarding crew 
safety. Potential crew activities Include construction, maintenance and 
repair of spacecraft, and scientific and applications experiments. These 
roles greatly expand man's activity In space but also Increases the range, 
duration, and level of exposure to risk to crewmembers significantly. 
Efficient, economic space transportation system (STS) use does not permit 
continuous standby of a STS orblter at the space station, and therefore, the 
operational approach differs from Skylab and the Russian Soyuz programs where 
Earth-return systems are available at the station. As the scope and level of 
manned activities expands, so does the Issue of crew safety. More Importance 
must be given to strategies, alternative strategies, and other solutions as 
necessary to counteract threatening situations. This study emphasis Is to 
Identify strategies or the combination of strategies which are cost effective 
and meet safety needs for the total spectrum of relevant safety Issues. This 
study will examine the threats (both natural and induced) at the space station 
and recommend appropriate control strategies. The strategies will Include 
alternative strategies such as escape/rescue. 

The primary study contract was let In January, 1983. See Figure 1-1. 

At the initial Rockwell -NASA meeting, additional scope was requested, that of 
extra-vehicular activities (EVA). EVA Is, therefore, Included In the study to 
assess EVA associated threats. The initial contract conclusion in association 
with research of analogous activities such as nuclear submarines and arctic 
station activity (representative space station situations of confinement In a 
hostile environment) dictated a need to also examine Information regarding 
human behavior. The NASA Life Sciences organization at Ames, as a result of 
these findings, added funds to the contract for an additional study extension 
to assess potential hazards to crew safety steirmlng from human factors/ 
behavioral Issues. This study report, therefore, attempts to provide a 
compendium of the results from both additional effort contract extensions. 

Results of the Initial study were presented to the space station 
contractors at a briefing held In Downey, California at the midpoint In the 
total effort. On November 9, 1983 the results were also presented to NASA at 
Its headquarters (CDG, Concept Development Group). The presentation was 
repeated at Langley on November 10, 1983 and at Ames on November 21, 1983. 
Video tapes of the Initial study Interim briefing at Langley were made 
available to the other NASA Centers. At an Ames Productivity Symposium during 
the week of February 27, 1984, a third quarter contract presentation briefing 
was given which sumnarized the first phase of the study and the mid-point of 
the human factors effort, Briefed were NASA and an audience of contractors. 

Subsequent study products were presented as noted. 
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Figure 1-1 Study Contract Key Milestones 
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Figure 1-2 Synergism of Strategies - Design to Preclude 





Study Products 


A number of documents have been prepared during the course of the 
contract. These are listed below: 


I1294-4QQ-83- 

SS083-0047 

SSD83-0064 

SSD83-0106 

SSD84-0106 

SS084-0052 


SSD84-0053 


•040 - Kickoff Briefing 

- Space Station Crew Safety Criteria 

- Midterm Briefing 

- Interim Briefing 

- Third Quarter Status Briefing 

- Space Station Crew Safety Alternatives Studv 
Final Briefing 

- Space Station Crew Safety Alternatives Study 
Final Report 


Feb. 

Apr. 

May. 

Nov. 

Feb. 


1983 

1983 

1983 

1983 

1984 


May. 1984 


SSD84-0055 


Vol. 

Vol. 

Vol. 

Vol. 

Vol. 


I 
II 
III 
IV 
V 


Summary Report (NASA CR* 3854) 

Threat Development (NAS7T CR-3855) 

Safety Impact of Human Factors (NASA CR-3856) 
Appendices (NASA CR-3857) 

Space Station Safety Plan (NASA CR-3858) 


„ Th ? * f , the ? pdce Statlon c rew Safety Alternatives assessment 

are contained in five volumes, the designated NASA Contractor Report 

A U of e VMuL W 5J Ch f e n ^ ed ab T; References are included in the Appendix 

i ? eS * Vol T e v 15 a safefc y P lannl "3 document which 
identifies programmatic issues and defines strategic task 
interrelationships. 


PURPOSE 

The complete study objective is to define space station crew safety 
reguirements and assess the various strategies developed to meet these * 
requirements. Included in the objective is : (1) to develop a crew safety 

philosophy and attendant criteria; (2) to assess potential threats to crew y 

existin 9 s P ace station design and operational 
concepts w th its attendant range of potential space activity scenarios in 
identify key crew-safety issues; and (3) to assess the various 
crew-safety strategies necessary to meet the desired criteria in terms of 

£hnf*? ab k« C £ St * ,1° accom P llsh this > it became necessary to identify those 
threats which could escape/rescue decisions. Additionally, it was deemed 
desirable to look at the baseline station and establish how it performs 
with respect to identified threats. The baseline is the configuration 
tJeveloped by Rockwell for the Space Station circa 3anuary 1983 using the 
shuttle orbiter at regularly scheduled resupply intervals. 
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SCOPE 


The scope of this study considers (operationally 1 se first 15 years of 
accumulated space statlori-eoneepts currently In evaluation by NASA for an 
Initial operational capability (IOC) during the early 1990's, Crew safety 
threat considerations defined by the original Statement of Work are: 
Individual Illness or Injury; system failures and operational accidents; and 
external threats. These threats are on-orbit debris, ground support and STS 
problems, and briefly considering Indirect and direct effects of military 
actions, it Is Intended that the depth of analysis consistent with 
Identifying key Issues for crew safety; defining key design, operational, and 
cost features-of various alternative strategies; and determining appropriate 
crew-safety criteria and concepts fcr use by evolving future space station 
studies. 


The logic used for the entire study considered three key points as 
significant: First - philosophy; "How much safety Is necessary (i.e., cost 
effective?"); second, ''What are the threats that the program Is prepared to 
deal with?",— and-thlrd, "What are the strategies and Interdependence of these 
strategies to meet the criteria developed to deal with the threats?" A 
philosophy of "Cause no damage to space station or Injury to crew which would 
result In a suspension of operations" was selected. Table 1-1 provides a list 
of the threats Identified during the study* In essence the criteria takes the 
philosophy and~rest«tes each threat In terms of the selected philosophy. The 
strategies were developed to satisfy Identified criteria. The strategies. In 
general, are documented in three categories. These thren are: design 
requirements, operational requirements, and safety device solutions or 
contingency requirements. 


TABLE 1-1 SPACE STATION CREW SAFETY 
THREAT LIST 


o Fire 
o Leakage 

o Tumbling/Loss of Control 
o Biological or Toxic Contamination 
o Injury/Illness 
o Grazing/Collision 
o Corrosion 
o Mechanical Damage 
o Explosion 

o Loss of Pressurization 
o Radiation 

o Out-of-Control IVA/EVA Astronaut 
o Inadvertent Operations 
o Lack of Crew Coordination 
o Abandonment of Space Station 
o Electrical Shock 
o Meteoroid Penetration 
o Stores/Consumables Depletion 
o Intrusion/Attack 
o Structural Erosion 
o Orbit Decqy 

o Loss of Access to a Hatch 
o Temperature Extremes 
o Debris 

o Free Orbit (EVA Astronaut) 
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Regardless of how well the designs are engineered, the summary Is that 
there win always remain residual threats associated with any baseline. There 

— are several methods one can use tj deal with some of these residual threats. 

and perhaps the best Is the development of new tecfmoTogyi — A~second 

alternative method (which, Incidentally Is where the stu<ty 90t Its name) to 
new technology development, 1c to apply developed escape -or rescue options.; 
The third method which occurs on all space pro grams, lslMLelect to arrgpt t^» 
risk 1 - associated with partlcilar p rob Temr that are above a desired threshold of 
risk exposure* The magnitude of the threshold Is driven principally by the 
selected Spac/ Station safety philosophy. 

STUDY SUMMARY 

'he Space Station Crew Safety Alternatives Study Is complete and several 
areas are well defined; these are: 

Threat and Strategy Development 

Identification of Threats to The Space Sta tion - Both natural and 
Induced threats were examined with a total of 2rthneats Identified and 
defined. A decision was Instituted to place emphasis on those major threats 
which are configuration "drivers". Nine threats fell into this category: 
fire, contamination, radiation, Injury and Illness, debris, micrometerlod 
penetration, depressurization and explosion. Although the other 16 threats 
are some which could present equally serious consequences, priority for 
definition Is restricted by resource constraints for the study. Available 
resources have been used to develop an^ Illustrate strategy concepts for thr, 
nine threats considered to be "configuration drivers". 

Strategy Development - Some of the strategies were— found as synergistic 
with regard to the other threats. Fire was an example where the strategies 
taken to preclude its occurrence, compounded the toxic contamination Issue and 
the explosion threat. Figure 1-2 Illustrates this synergism, where, In the 
case of fire/explosion, the strategies or solutions tended to complement one ■ 
another. For some of the other threats such as debris and radiation, the 
solutions tend to Impede each other. For example, In the case of ionizing 
radiation. It Is apparent that the strategy should be a multiwall vessel with 
t absorbing filler to screen secondary radiation and barriers to reduce 
s mdary radiation, (viz, the level of REMS that accumulate before the 
prrgrammed use life Is over). Non-ionizing radiation protection is also 
indicative of multiwall protection. For the debris threat, an optimum 
solution Is a dual wall with no filler, enclosed in an evacuated annulus 
established by the waU-s-such-that impact energy Is spread over a larger 
area. These considerations present a conflict for exterior wall design. 

Also, for visual sensing, one may use dual transparencies; consequence reduced 
transmissivity. A dual wall Is also desirable for pressure safety 
considerations. For temperature-considerations multlwall with Insulation Is 
preferable. (See Figure 1-3.) As one can determine, station exterior wall 
considerations regarding these particular threats result In significant 
barrie r s ystem design tradeoffs. These strategy areas driving design 
tradeoffs associated with each of the threats would In themselves require 
significant study as the selected approach Is resolved. 
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Threa c/Strategy Conclusions 


It became apparent as the study progressed that creative design 
solutions and operational work-arounds can provide a defense hierarchy for all 
the classes of threats except one -- that of Injury/lllness. This category 
becomes the singula*- justification for an escape/rescue vehicle located at or 
In proximity to the station. Injury and Illnesses, when categorized, define 
the population of each of the categories requiring rescue. The population Is 
shown In Figures 1-4 and 1-5, Note that a ballistic reentry vehicle (occupant 
experiences between 6-H g's) could not accommodate any of these cases due to 
the g load. A lifting body solution Is the Indicated. When one also explores 
the percentage of a Wge crew that could need to escape, an even more 
disturbing discriminator emerges; lack of capacity. Figure 1-5 shows typical 
causes whieh eould drive the need for escape for 1 to 3 pe le. 
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•INTERACTING ELEFENTS OF BARRIER SYSTEMS SHOULD BE STUDIED 8 ASSESSED AS AN 
INTEGRATED SYSTEM 


Figure 1-3 Barrier System Issues for Habitable Modules 
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Figure 1-4 Possible Crew Injuries end Required Treatment and Provisions 
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Figure 1-5 Possible Crew Illnesses and Required Treatment and Provisions 



Earlier observations that most of the threats can be mitigated by 
creative design solutions and operational work-arounds, should not be 
interpreted as possessing the-absence of a- risk element. On the contrary, 
several threats require precise strategies that must be well-defined early In 
the program. Table 1-2 lists the summary safety Issues selected during the 
study as requiring a high priority of definition early In the program. 
Included In Table 1-2 are typical recommended strategies. Figure 1-6 depicts 
representative strategies Involved In dealing with the debris threat. Note 
that there Is a finite amount of risk which must be accepted for each of the 
threats. 

Added strategies are shown In Volume III of this report. For example, 
past American space efforts have focused primarily on the physiological 
aspects of crew activity and today, added emphasis Is considering the 
psychological. It Is suggested by the Illustration tMt an appropriate 
response to the lack of coordination Issue requires a oalanced focus similar 
to our present efforts, augmented by many of the techniques used by the 
Russians. 
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fABLE 1-2 STUDY SUMMARY ISSUES 
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Figure 1-6 Debris Strategy Options 



ALTERNATIVE STRATEGIES 


r.T,« Th1 L2S" t ° f ^ he Summary hi 9 h11 9 hts the options for escape and 
rescue. Several questions were examined, l.e.* "How realistic is it to 
evacuate the space station if the need arises?”; "Do the threats «oil« an 
Immediate response?" i "Wfiat are the technology risks?" * 
pro hibitive ?"; and "How many of «S SST S'lfthe elc.pe/refcuTmSde* 5 

and how long does It take to escsprtleave ffie area of threat)?"* 
re ^ a tfonsh1p between time to repair vs. tlme-to-adverse-imoact?" 
he recognized that these scenarios postulate various degrees of 
calamity); and Why would less than a full crew des1retoescape?"^he mil or 

?n S Tahi® e ? ! ess a ,^ u ^ crew would wish to return to earth are shown 
1" Tab ]f I’f- As Previously discussed the medical issue Is the only one 

implies* the t need ,l 'f C 6 escape or rescue situations and It 
r? P Iif S *i h t< eed f a 1 ! ft1ng b ody rather than a ballistic reentry vehicle 
it pr °9ram elects a one man or two man escape or rescue vehicle* 

It would evolve serious questions: 1) "Can the program tolerate 8 or 4, or 
e ? en Jd Se P* rate esca P e vehicles at the station?"; It Is difficult and 

t0 r et ? eVe a number of escape vehicles simultaneously. 
t 5f ^ me required to enter the escape vehicle?" Designs (for 
other than medical evaluations) should contain a dedicated breathing system to 

EVA-type ^escape^ ** 0V6ra11 ava11able time such as associated with entry of an 

Next, Figure 1-7 shows generic options for escape and rescue which mav 
be grouped within 5 categories. Option A has, located at the space station* 
an escape veh cle which escapes to aarth with the actcalreSuf perforaed bi 

and nrQviHL A )!L Force ' 6 is 3 raanned Orbital Transfer Vehicle {OTv/ 

and provides the crew with opportunities- to relocate to a second station to 

pick up needed repair parts and return to space station, repair the station 
and continue operations. Option C Is an external safe^aS lI thl1IJ??on, 

t0 the station and awaits rescue by the orbiter or friendly 
which then proceeds to earth by some preselected means. Option D 

other* S f rienrfi n in 5? r ? a s «fe haven which provides for rescue by the orbiter or 
other friendly vehicle at a later time. A ground launched supply vehicle or 

S a *- be ser *t as the Russians did in late 1983, to repair the 
space station and thereby allow It to resume operatloS. Also, if^S rescul 

mwl e tn e I!ik ai '^ le and repair was not f eas1ble, the crew could reenter and 
f a ^* J be res P° nse time for an Internal safe haven Is highly 
favorable and requires a short time to enter and because the capabllitvls 
Inherent to the Space Station, It presents low technical risk 


TABLE 1-3 WHAT WOULD CAUSE ESCAPE 
OF LESS THAN FULL CREW? 


1 MAN? 


2 MEN? 


3 MEN? 


0 SOLE SURVIVOR 


o 


TWO SURVIVORS 


o THREE SURVIVORS (REMOTE 
PROBABILITY) ESCAPING 
IMPENDING DISASTER 


0 PHYSICAL MEDICAL 
ISSUE (CUT, SOME 
BURNS) 


INDIVIDUAL CREWMAN 
MEDICAL ISSUE 
REQUIRING CONSTANT 
AID BY MEDIC 


o DECEASED 


o PHYSICAL 

o PSYCHOLOGICAL ISSUE o PSYCHOLOGICAL 
o DECEASED o DECEASED 



Figure 1-7 Escape and Rescue Options 



An STS Orblter Vehicle on Station, or berthed nearby, offers unique 
benefits. For example, consider the first time that a specific hazardous 
operation is being performed at the station, such as transferring hydrazine. 

It would be prudent to have the orblter stand by at the station during this 
operation. In fact, If the orblter Is standing by In the vicinity of the 
station during any first time risk activity, the overall program risk-level Is 
significantly reduced. Another consideration for this option would be to 
provide for escape of eminent technical scientists or personnel who In the 
Industrial world possess a one-of-a-kind capability. The program, In this 
context also may not wish to risk those who are not basically adapted to space 
to remain In orbit 60 days or more as a function of the next vehicle routinely 
returning to the station. A proposed solution would be to hold the Orblter 
.vehicle over a day or two (relative cost consideration being less than one 
million dollars a day). 

EVA SAFETY ISSUES 

An evaluation was performed of EVA for the Space Station. Among these 
were scenarios examining the current philosophy of EVA and evaluating results 
of the current shuttle missions Involving EVA. Several observations were made 
regarding EVA deficiencies. First, as currently performed, EVA Is treated 
almost as an afterthought instead of an integrated system. One of the key 
decisions Is whether EVA will be a routine activity or a special event. 
Although the cumulative risks may appear higher for routinely-performed EVA 
due to Increased exposure, the risks per EVA are thought to be greater for the 
"special event" mode due to the lack of familiarity with the equipment 
Interface which would cause Individual excursions to be more risky. It Is the 
Rockwell Safety opinion that EVA should be a baselined operation. 

Whether EVA is baselined or not, several policy decisions are 
advi sable: 

a) The EVA suit must be designed to preclude prebreathing. This 
capability does not currently exist on the Shuttle but one can reenter and 
land within 168 minutes In most contingencies. 

b) The EVA suit should be capable of being Inspected, maintained and 
easily de-contaml nated on-orbit. 

c) EVA airlocks should be designed to sample and recycle Internal 
atmosphere back to a supply rather than vent-to-space during depressurization 
operations to minimize consumables budget expenditures. For contaminated air, 
the capability for dumping to space should exist. 

d) Capability for a decompression chamber should be available. 

e) Provisions should be made to protect the suited crewman from 
hazardous Incidents such as hypergollc spills or Increased solar flare 
activity. 

These and other considerations such as that of maintainability tends to 
Indicate the advantage of utilizing the hard suit technology which Is 
currently approaching maturity. 
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SAFETY ASPECTS OF HUMAN FACTORS 

r»rnnnJ* 4 )ll eW l n ? sp ? ce , 4s 4 hostile environment to unprotected man and In 
collected anafvze data from'ltms developing, an approach was taken to 
those assoc1atedJlthtL f ™^ fu endeav ? rs or environments analogous to 

(submarines and anta^fc SSfSii e^S^l^ef ^sVaSlVc^rracJe^"?^^ z 
(1) a large population, (2) well defined screening of personnel an S' 1 * 
Su» t P s° S V? ^°r Hf * WI»l4SS and P human°f actors 3 
confined space of submarines and the ( solatlon of aMaJct^ st^l^s ?! 

if bo^ij^L^eJuS^ the wrst 

there 6 ?! 6 ^ Eve J w1th the ad<le<1 Russian emphasis of psychological support 

£ nyss sms 


SUBMARINE 

SPACE STATION 

ANTARCTIC 

• CLOSED CYCLE 


— •LONG PERIODS OF 

ENVIRONMENT 


ISOLATION 



— •NO COMMUNICATION 

• CROWDED QUARTERS 





- • RELIANCE ON MEDICAL 

• NO "QUIET” PLACE 


CAPABILITY 



“ • ESCAPE NOT POSSIBLE 

•CLOSE CREW .NTERACTION 


IMMEDIATELY 

REQUIRED 





— • HOSTILE ENVIRONMENT 

•OPERATIONS 1 TRAINING 


CANNOT BE AVOIDED 

PRIME MISSION 





“ • SURVIVAL DEPENDS ON 



OUTSIDE c 0RCE$ 



- • STATION MAINTENANCE 



PRIME MISSION 


NOTE: 

MOST SEVERE ISSUES FROM EACH ENVIRONMENT DIRECTLY APPLY TO SPACE STATION 

Figure 1-8 Aggregate Stressors for the Space Station 



SELECTED OPEN ISSUES 


Several Issues Identified during the course of the study demand further 
expansion as resources become available. The following issues are emphasized 
because the technica l community appears to lack uniform agreement as to the 
proper course of action relative to existing space configurations. The Issues 
are summarized In three categories, viz., A) technical, B) programmatic and, 

C) human factors. 

Technical 

Safe Haven - Multiple Safe Havens Concept and Attendant Limitations. 
Proposed configurations which consider every pressurized volume as a "safe 
haven", lack practicality as each habitable volume would need to Incorporate 
the requirements of safe haven (viz., food, thermal, breathing air, CO? 
removal, etc.). Conversely, if the haven is dependent upon another volume for 
Its habitable elments, then the volume is not a defined safe haven because 
survival may be lessened due to volume Interdependence on evacuation (or 
"escaped from"). 

Depressurization - How Many Volume Change-Outs? Volume changeout 
possesses two major variables, that of the safety philosophy (fail safe vs. 
fail- operational /fail safe) and the magnitude of volume involved. It is 
desirable to require a fail -operational /fail -safe capability but the 
consequence Is an "over-kill" If applied to the entire station. 

Resource Utility Module Concepts - A conceptual single failure point is 
defined if the resource module functions are located in a single volume. When 
module functions are distributed, then a measure of damage tolerance exists 
compared to the vulnerability of a single location. Further, several concepts 
consider the resource module(s) as an unpressurized volume(s). Conceptually 
an unpressurized volume may be acceptable except for evidence that these 
modules will contain most of the high-maintenance hardware. Accomplishing 
repair In the volumes requires an EVA (pressure-suit) capability which appears 
to present a larger expenditure of resources as well as providing attendant 
higher risk. 

Dual Egress Capability - The study concludes that It is highly desirable 
for all habitable modules to Inherently have alternative escape routes or 
modes of egress. The possible exception to this conclusion Is the lab module 
or work place where hazardous substances can be placed at the opposite end of 
an egress area and alternate techniques of escape Implemented such as allowing 
people on duty to leave through an adjacent hatch or airlock. 

Synergism of Strategies - The positive and negative synergistic 
contributions of Individual strategies were discussed earlier In this 
narrative and Illustrated the range of solutions to fire/explosion and 
radiation/debris threats. Of particular significance Is that there Is no 
single action or actions as a strategy for any of the complex threats but 
rather a family of solutions. Paramount, therefore, Is the selection of and 
committment to a strategy approach that provide the most cost-effectiveness. 

Programmatic 

The programmatic Issues, those requiring prudent management action are 
emphasized below: 


T h e Variable Facility Syndrome - On earth there exists two distinct 
safety disciplines: system safety, which considers the safety of crew, 
hardware and personnel during all aspects of design, operation and human 

Interface, and Industrial safety which governs the workplace environment 
(QSHA). 

The space station will not be compatible with an QSHA-type discipline, 
but rather It Is a sophisticated variation of system safety. The station Is a 
facility that changes with each arrival and departure of an orbiter in that 
the orblter either delivers or retrieves consummables, products, materials, 
fluids and/or experiments to/from the facility. The limitations of the 
Industrial safety approach Is that no provision exist for the zero-g 
uniqueness , the station configuration or its response to the unique 
environmental constraints. It has been estimated that less than 25% of the 
Industrial safety requirements are useable In a space station setting. 

Total System Safety Integration Function Should Be Guided By Str ategies- 
C1 asslcai system Integration functions are performed at level 2 (B) "based orf* 
Inputs from various level 3 (C) elements. This Integration becomes either an 
Interface analysis or a "top-down" assessment or both. The limitations of 
this approach Is that the Integration function Is limited by the quality of 
data and is at the schedule mercy of data provided by level 3 (C) elements 
which more often result In after-the-fact examinations. The appropriate 
approach Is to have an Independent up-front strategy for each of the threats 
and measure the compliance to each strategy of the total vehicle level 2 (B) 
and 3 (C). 

Cost of Strategies - There may be several design and operational 
solutions to a given threat. Some-of these are less expensive while others 
have fixed costs as opposed to having recurring costs. Also the issue of 

synergistic effects of various solutions in a strategy need to be well 
understood. 

Human Factors 

Some of the more significant open issues in Human Factors are: 

Absence of a Proper Repository for Non-Design Criteria/Requirements - 
Desl gn and operational solutions are driven by requirements which satisfy 
criteria. Some of the human factor strategies, however, Involve programmatic 
Issues such as crew selection, crew training, medical profile for crew 
selection, etc., which have no requirements home for use on the station. 
Others, such as acoustics or contamination can be specified in requirements 
documents. 

. Absence of a Strong Sponsor for Key Human Factor Issues - The study 
concluaes tnat the measure of success of removing a given human stress is 
highly dependent on Its overseer such as the government and the particular 
Influence. An example Is In the area of acoustics within the habitable 
module(s). Volume ill, Section 5, shows the Impact of the lack of a strong 
accoustlcs definition for the Apollo and Shuttle Orblter programs. 


Need For Medical Dlagnostic/Treatment Center 5 Qn-i©ard the Station - 
Aval 1 ability of data is currently Insufficient to define a medical facil 1 ty 
for the space station. It Is understood that the medical community is 
currently reaching an agreement on the minimum medical facility requirement. 
From a human factors perspective, there Is a need for minimum medical 
capability sufficient to provide the crew with confidence of survival and 
well-being during all anticipated emergencies. 

Need for Expanded Emphasis on Crew Selection/Tralnlng - A review of the 
safety Impacts of human factors inu cates that more sophisticated crewmembers 
screening and a greater dedication to training for all tasks would do much to 
minimize stressor Impact on space station personnel. 

SUMMARY 

The study indicates that a mature well-defined station possesses 
operational scenarios which include redundancy and appropriate technical and 
human provisions for dealing with threats. There exists at this time no 
justification for a dedicated on-orbit rescue vehicle. One study conclusion 
Is that during the build-up phase the program will experience hazardous 
situations or risks that cannot be avoided. These risks, however, are not 
excessive. 


V 1 ^ 




2. STUDY APPROACH 


, cma J h K,i pa $ e Station Crew Safety Alternative Strategies Assessment Study Is 
s * rate 9* c ^ nk In the activities now getting underway to establish 

“if g S f e«e?liKS*a5 t ;S 0 SNf.;*? ,,e t "ext "Mjor u. s. ’space"’ KnSIJlcJ 
fStlS! 8 « r ^ e pro 9 ? a S “ b,,S, ' 1n9 t " port, '" t »»«9ur.t1on.J and operational 

To fiffcctl vdy And sfflclGntly Identify technical rltk hiAt^ne 

process 0f The a tl?hn7i th the S £ ecome essentia1 1n the design and operational 
process. The technique used here was to Identify threats (llfe/survlval- 

threatenlng situation) and strategies to deal with each situation 0 


are defined^ ° f terms reCUr throU9hout the study. 


In Table 2-1 these terms 


TABLE 2-1 - INTERPRETATION OF TERMS 


objective's'* $ u,nraa, 'y s tatement of program safety 

THREAT; Situation which endangers either the crew or 
the space station 

POTENTIAL THREATS: Threats which might arise, without 
^egarJTo^proBaRlity, frequency, or severity 
jLJ-CIFIC THREATS : Threats which have been determined 
to nave a combination of probability, frequency and/or 

rsTTFora • f °c+ a +^ Ve H s 2 e !! arl0 that the y must be dealt with 
—TtRiA . Statement of design or operational means to 
control Individual threats 

SCENARIO: Set of mission activities which create 
situations for specific threats 

PX-SAFETY ISSUES: Safety concerns that have significant 
c?Dl?ro2 r °P erat1onal Impact on the space station 
STRiUEGY: Approach used to achieve resolution of key 
safety issues J 

I NES AND REQ U IREMENTS : Specific design or 
operational requirements recommended for the next phase 
of the space station program 


I 


. i The ^“^development logic. Identified threats, the strategy 
follow?!™"™ loglo. the strategy development processes are defined In the 
™lf?nn2L P * 9es * Thos ® top eight threats which have Implied major 
of vJlUme ll!' ° r operational 1mpact have be ®« dealt with In separate sections 
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STUDY LOGIC 


The stu4y was, by contract definition, divided Into six tasks. These 

1V?‘c m , Li ^ erature Sea r c ? and Data Election, (2) Crew Safety Criteria 
(3) Scenario Assessment, (4) Assessment of "Baseline" Crew Safety Concept (5) 

A lf ernat e Crew Safety Concepts, and (6) Development of a Space 
Station Safety Plan. Figure 2-1 shows the logic that was developed for the 
boundaries for the six tasks. A brief recap of each task 

to Hows: 

1*®* 1 " Collect and analyze technical data to provide a data base file 
and a technical assessnient of the data by task categories. 

Task 2 - Develop a crew safety philosophy and criteria which allow a 
proper balance to be obtained between personnel safety, the value of the 
space station and the exposure which the National sfSa Proo?tin reJeivel 
In a contingency situation. The criteria will be designed to mitigate 
threats In a manner compatible with the philosophy. 

Task 3 - Identify operations - related safety issues, which In concert 
with configuration issues must be addressed to minimize risk to an 
acceptable level. The variable of how the space station configuration 
may be required to function as a result of specific operations often 

capabiTl tl es"* f * cant modification of proposed subsystems locations and 

Task 4 - Assessment of the "baseline" crew safety concept provides a 
determination of how well the autonomy of the space station and shuttle 
rescue at nominal resupply missions can satisfy the crew safety criteria 
and hence mitigate the crew safety threats. 

Task 5 - Assessment of alternate crew safety concepts allows one to 
"baseline" 6 threat ex P° sure reduction by use of means other than the 

Task 6 - The space station safety plan will allow early emphasis of 
study results in a format that the NASA may use for advance planning on 
phases B and C/D. 

Figure 2-1 depicts the logic used for accomplishing the above six 
It should be noted that once a philosophy for the station has been 
iUKSr.J 1 * dha ] len 9? becomes two-fold. First, the Identification of all 
credible threats (or risk -generators) and second, the development of a course 
of action to either preclude the occurrence of each threat or reduce such 

2h5w!!nh5 i^H?K? cc ?E tab ] e consequence. In light of the predetermined 
philosophy credible threats cannot be completely eliminated. The preferred 

hS P 2rfoJr^ H “?! a threat r®^ uc ^o n precedence consisting of (1) elimination 
by redesign or other means, (2) minimize the Impact, and (3) safety devices 
and contingency procedures. (Ref. NHB 5300..KD-2)). 























The techniques for dealing with Individual threats are called 
strategies. A strategy Isa conscious effort to render a given threat 
harmless, or at least no greater than some predetermined risk threshold. 
Strategies may be simple (l.e., fix the hole for a leaking volume) or complex 
(l.e., lower the volume pressure with volume Inhabitants using IVA masks or 
oxygen bottles because of atmospheric contamination). The mechanism for 
transferring a threat to a solution Is a criterion. Criteria are generally 
top-level statements of policy and are true for all verified threats. The 
method of Implementing a criterion is usually a requirement which may be 
either a design requirement or an operational requirement. A third type of 
requirement Is one for safety devices and contingency procedures. These are 
less desirable in that they are usually the last line of defense against a 
threat. A brief discussion of criteria is provided below. 

The final segment of the logic flow deals with alternate strategies, 
those strategies which address threats which cannot oe eliminated by redesign 
or other means. There are basically three strategy categories: a) 
Escape/Rescue, b) Development of new technologies, and c) Risk acceotance. A 
separate section of this report Is dedicated to the subject of escape and 
rescue. New technologies have been studied in some detail and nave several 
promising benefits to the health of the station and its crews. Risk 
acceptance allows a disciplined examination of the unresolved (or 
unresol vable) safety Issues and the arrival at management decisions regarding 
their credibility and acceptability. 

CREW SAFETY PHILOSOPHY 

Rockwell has been intimately Involved in assisting NASA to establish 
safety philosophies and criteria, starting with Apollo (where systematic 
safety programs were Initiated), through Skylab, Apollo-Soyuz, and on the 
Space Shuttle. It is Interesting to trace the evolution of crew safety 
philosophy through these programs, and to understand the reasons for this 
evolution. Table 2-2 Illustrates key features of these philosophies or 
goals. The emphasis has gone historically in two directions: (1) a tendency 

to go from escape and rescue measure (e.g., abort systems) toward obtaining 
Inherent safety (l.e., reduce/ “Hmlnate threats); and (2) an increasing 
Interest In saving not only the crew, but also the very valuable space 
systems. We expect these trends to continue as space operations mature and 
become more routine, and as space hardware becomes more expensive, with longer 
mission durations. The safety philosophy which was baselined for the crew 
safety alternative strategies study was consistent with these trends, and Is 
shown in Table 2-3, selected from a few potential philosophies. 


TABLE 2-2 ROCKWELL EXPERIENCE IN THE DEVELOPMENT OF 
SAFETY PHILOSOPHY IN SPACE PROGRAMS 


Program 1 

"WETY" PHILOSOPHY 

RATIONALE 

APOLLO 

o CREW SAFETY GOAL, .999- 
0 ABORT CAPABILITY IN ALL MISION PHASES 
0 BACKUP MODES FOR CRITICAL FUNCTIONS 

o MANY UNKNOWNS AT TIME 
0 WORLD-WIDE EXPOSURE 
OF PROGRAM 

APOLLO-SOYUZ 

o ABORT CAPABILITY IN ALL MISION PHASES 
o BACKUP MODES FOR CRITICAL FUNCTIONS 

0 PROVEN HARDWARE 
o SINGLE MISSION 

SKYLAB 

o LAUNCH CPEW AFTER SKYLAB SUCCESSFULLY 
ORBITED 

0 CREW ESCAPE AVAILABLE BY APOLLO CSM 

" j 

o USE OF EXISTING j 

HARDWARE 

SPACE SHUTTLE 

i 

1 

0 ABORT CAPABILITY USING THE ORBITER 
0 LIMITED CREW ESCAPE SYSTEM DURING 
ORBITAL FLIGHT TEST 
o BACKUP MODES FOR CRITICAL FUNCTIONS 
0 ORBITER-TO-ORBITER RESCUE OF CREW 

0 SPACE PROGRAM MATURITY 
0 EMPHASIS ON ELIMIN- 
ATING CONTROLLING 
THREATS RATHER THAN 
ESCAPING FROM THEM 


TABLE 2-3 SPACE STATION PHILOSOPHY PRECEDENCE 


CURRENT OPTIONS 

COMMENTS 

•CAUSE HO DAMAGE WHATSOEVER TO SPACE STATION 
AND NO INJURY TO CREW 

DESIRABLE: COST TRADE 

• CAUSE NO DAf’AGE TO SPACE STATION BEYOND 
ROUTINE MAINTENANCE CAPABILITY 

COST TRADE 

•CAUSE NO DAMAGE TO SPACE STATION OR INJURY 
TO CPEW WHICH WILL RESULT IN A SUSPENSION 
OF OPERATIONS 

BASELINE PHILOSOPHY 

•SPACE STATION REPAIRABLE AND OPERATIONAL 
WITHIN A SPECIFIED PERIOD OF TINE 

MAY REQUIRE ESCAPE/RESCUE 

•CRFW SURVIVAL AT EXPENSE OF THE SPACE 
STATION 

IMPLIES EVACUATION AND RESCUE. 
AS A MINIMUM 
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THREATS 


A threat is a situation which endangers -either the crew or the space 
station. Threats may be grouped in seve-eal categories: simple or complex, 
personal or community, time -dependent or spontaneous and natural or self- 
Induced by the station. The author has defined a threat as simple or complex 
based on the physics of Its- occurrence. For example, a depressurization 
threat Is generally simple. Most have a single cause such as penetration by 
debris or a failed (open or leaking) barrier or valve to the vacuum outside. 

A complex threat has multiple causative elements. Fire, for example, 
generally requires fuel oxidizer and an Ignition source. The motivation for 
making the distinction In classification of threats as simple or complex 
arises largely from the complexity of the fix, or strategy. Clearly, the 
simple cause can more easily be accommodated than a threat which has several 
elements In each cause. Complex threats require complex strategies. 

The grouping of threats as personal (Involving Individual crew personnel 
such as a crewman or EVA) as opposed to community, in which the entire station 
has an exposure to risk provides an aid to operational planning. 

Whether a threat Is time-dependent or spontaneous Is a major 
consideration In Alternate Strategy Development. The time available to 
Ingress an escape vehicle Is one of the major discriminators as to whether 
escape Is a viable concept. When a threat Is a natural one, such as radiation 
from solar flares, most of the station hardware and personnel are Involved In 
the strategy. The same may be true for station-induced threats, such as 
particulate contamination, but the consequences are far less severe for the 
strategy perspective,. 

A complete listing of threats, as shown In Table 2-4, was used for this 
study. This list is a composite of Rockwell experience, augmented by a 
dozen-odd reviews and presentations to groups composed of the NASA, 
competitors and safety specialists. 

These threats were also considered from the standpoint of their 

f otentl&l Impact on configuration solutions. Effort for this study, being 
Imlted by resources, was focused on those threats which would have the 
greatest Influence In configuration selection. The eight threats thus 
selected are indicated In Table 2-4. 


Table 2-4 SPACE STATION CREW SAFETY THREAT LIST 


o Fir** 

Leakage 

Tumbling/Loss of Control 
o Biological or Toxic Contamination 
o Injury/lklness 
Grazlng/Colllsion 
Corrosion 

Mecahanlcal Damage 
o Explosion 

o Loss of Pressurization 
o Radiation 

Out-of-Control IVA/EVA Astronaut 
Inadvertent Operations 
Lack of Crew Coordination 
Abandonment of Space Station 
Electrical Shock 
o Meteoroid Penetration 

Stores/Consumables Depletion 
Intrusion /Attack 
Struetrual Erosion 
Orbit Decay 

Loss of Access to a Hatch 
Temperature Extremes 
o Debris 

Free Orbit (EVA Astronaut) 


STRATEGIES 

A strategy is an approach used to achieve resolution of a threat or a 
key safety Issue. There are rare Instances where a single strategy-M.1 11 
suffice In the threat mitigation process^ For example, a bumper or shield may 
be used to protect against mlcrometerold penetration. The majority of 
strategies, however, encompass multiple facets. 

An example of this Is that the steps one would take In making a fire 
Improbable by breaking two legs of the "fire triangle" greatly enhances the 
reduction of explosion potential by similarly affecting the explosion 
penta-rlng". One added consideration Is that strategies chosen may often have 
synergistic effects. This synergism may appear either as a positive 
(beneficial) factor or a negative one. 

Strategies may fall Into categories of either design solutions, 
operational solutions or safety devices with contingency procedures. Often 
the most effective strategy Is a combination of two or more of the above. A 
general rule-of-thumb for strategy application Is to first build a first 
11ne-of-defense" for the threat to preclude damage to personnel or the 
vehicle. Then, -assume that the threat was not effectively -mitigated and 
develop a "second llne-of -defense" which presumes the existence of the threat 
and design for the station and personnel to accommodate the threat 
consequences. 

The ideal solution for a given threat may not be realistic from a total 
station perspective. Thus, each strategy must, of necessity, weigh the 
following factors, as a minimum. (1) Synergistic r ®®ction with other 
strategies. (2) Compatibility with station safety philosophy, (3) Flexibility 
for station growth or expansion, (4) Economic feasibility, (5) Technical risk, 
and (6) Human factors impact. 

CRITERIA DEVELOPMENT 

A criterion is a design or operational means to control an individual 
threat. The primary purpose of the criteria Is to provide a source for both 
design and operational requirements in a manner that is easily Incorporated 
Into conceptual tradeoffs and configuration selection studies. J^ce the 
safety philosophy has been selected, the criteria are largely determined by 
this philosophy. Figure 2-2 shows this schematically by h1 9hll9ht1ng the 
thread from the philosophy and the threats (derived independently) to 
criteria, strategies, and requirements. 


IMPORTANCE 
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THREATS 
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Figure 2-2 Sequence of Study Outputs 
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RISK ASSESSMENT/ACCEPTANCE 

The process of accepting a risk, Is a formal technique used for each 
Individual hazard that is not eliminated or otherwise resolved. The - 
priorities for hazard reduction are shown In Figure 2-3. These are: first, 
design to preclude, then design to control, then operational workaround, and, 
finally, define the residual hazards. For the residuals (1 .e. , ones that are 
left over), one generally tries to solve the threat with one or more 
strategies: 1) Where adequate strategies do not exist nor does a technology 
exist to accommodate the hazard, (or If the technology exists, but It Is too 
costly to accommodate the hazard), 2) that an occurrence Is a highly 
Improbable (note that it is still a hazard, still a threat, but it's happening 
Is not judged to be that probable). The last consideration is one where the 
consequence has limited impact. Clearly, categorization each of these Is 
subjective and is a judgement- call and not something where precise guidelines 
exist. For example, most members of society have accepted the risk of being 
near 120 volt outlets In their homes or sitting near automobile- fuel tanks 
that have gasoline which, if in vapor phase, is several times more destructive 
than an equivalent mass of TNT. Aircraft and spacecraft operators accept 
similar risks on a routine basis. For example, all of the space shuttle 
i lights have been made without benefit of a rescue capability. 


t > 

i 



Figure 2-3 Acceptance Risk Discriminators 
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3. SPACE STATION BASELINE 


Tn**«J5? baseline space station used In this study was the Rockwell 
i££ f! 0 ? 1 Conf j9 urat1 <>n in existence at contract Initiation in January 

" 83.0032.2 Pj, 69-84) . Its Space Static!! IrcMUcture 
lLf?An r<be ^ I! s ® ct<on * The modular elements that make up each of the 
S52e! on £? nce P ts are also described as are the standardized module 
construction concepts. The station build-up sequence for each station 
arrangement Is also Included in the description. 

INITIAL SPACE STATION ARCHITECTURE 

Architectural development of the Initial Space Station considers two 
ext ®rnal architecture and Internal arrangements of the basic 
configuration and standardization of the construction of the modular 

5elds r 'Jf*thi n fSrjfli a r an9ementS were devel °P ed that fulfill the habitable 
needs of the Initial four-man crew, and at the same time, minimize the scars 

that may result when the Initial station progresses to the full -up 
architecture. K 

ct a «H a C ^? fl 5 Ura i 1 ? n ° f the P ressur1zed basic station elements evolved from a 
standardized module concept that opted for cornnon diameters, bulkheads 
environmental protection, floor locations, and docking/berthing interfaces 

leakaoe SSU El?h d m!12 < !i le? *1® of . mo " oc<) ? ue aluminum, welded for minimum 
leakage. Each module is two standardized end cones and a center cylindrical 

available A Sf n Sl d J e ;T? n i t 5 at conta1ns four standard Interfaces Is^lso 
r L a sta " dard interfaces are also incorporated In the end cones. 

Ih?ch y l fe 2 t ? re * ta ? dard structural rings 7 Inches deep, 

J51 If *5® mod “les dur1n 9 manufacturing and transportation and 

wlthlJ a t « a11 ? w installation of the environmental shield 

within a 14-foot outside diameter envelope. A standard floor location was 
also incoporated Into the Internal arrangements. location was 

. . p. J n the habitable volume above deck, an 82-Inch high aisle Is provided 
"I 11 allow the simultaneous passage of two pressure-suited crew members 
" cond ti°n. In the equipment section below the flSoT 5 

40-inches wide, which provides for a pressure-suited crewman to 
perform maintenance operations. Both aisle widths are compatible with the 
Identified equipment envelope sizes. H W1 ™ xne 

A false celling In each module contains the lighting fixtures and air 
rec? rculatl on 6 subsystem S §ucts^ h * **" f *' Se Ce,,i " 9 c0 " Mins w1r,, ’ sl and a,r 


nm ♦.y.J?nl nt IJ rate ? env l ro , nmen tal protection subsystem consisting of meteoroid 
ShTTrilldin S' wlh'XJ.” ,ns “' at(0n ’ and radtat,on protection 

The standard docking/berthing Interface accommodates module mating, 
ef,_ ^°I s t a tion mating, and user module/pallet mating to the station It 
s !r a J da * d mecha n1ca1 alignment and etching provisions and a standard 
fJl arran 9 ei JJ ent * A 30-Inch by 40-Inch clear opening provides 

J°r parage of equipment and pressure-suited crewmen. All the utility 
Interfaces are remotely activated after completing and verifying the * 


! MM' CEDING 


PA OF. FLANK NOT FILMED 
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mechanical mating. In addition, all -connections feature manual override 
provisions permitting servicing or maintenance to be performed by either a 
shirtsleeve or a pressure-suited crewman. 

Other crew safety requirements are fulfilled by dividing the Space 
Station Into two Independent pressure volumes, each capable of serving as an 
emergency safe haven for the entire crew. Safety features and characteristics 
of both pressure volumes are summarized In Figure 3-1. A pressure bulkhead 
within the command module separates the two volumes. Volume I contains the 
energy module, the forward end of the command module and the logistics module. 
The aft end of the command module Is In Volume II. 

Initial Station Configuration 

The elements that make up the Initial Space Station are the utility 
module, the command module, two airlocks, the logistics module, and the 
payload service assembly. One airlock is mounted on the energy module and the 
other on the crew module, thus providing EVA egress from either pressure 
volume. 


TWO VOLUME CONCEPT 



ADAPTER A 

I 


PAYLOAD 

SERVICE 

AMY 


Figure 3-1 Initial Baseline Space Station Arrangement for Crew Safety 







Energy Module . The energy module provides the main source of electrical 
power for the Space Station. It Is constructed In accordance with the 
standardized concept having cone ends and a cylindrical center location that 
contains four mating ports. Mating ports are also provided at each end of the 
energy module. The overall length of the module Is 20 feet; the maximum 
Inside diameter of the center section Is 164 Inches (13 feet 8 Inches). 
Peripheral rings between the 90-1nch-long center section and each cone end are 
178 Inches In diameter. The module Is of welded aluminum with external 
meteoroid bumper and Insulation. 

The Internal structure consists of two bulkheads for equipment mounting, 
one at each end of the center section. Equipment mounted within the module 
Includes fuel cells, electrolysis units and electrical power conversion, and 
distribution components. The control moment gyros and their associated 
computer and inertial measurement units are also mounted in the energy 
module. Docking radar and communication equipment Is mounted In one end of 
the module. 

Four reaction control engine modules are mounted on one cone end with 
provision for shirtsleeve servicing from Inside the energy module. 


The reaction control subsystem propellant storage and accumulator tanks 
are mounted outside the energy module around the cone ends. All internally 
mounted equipment is accessible from a 40-inch-wide aisle for service or 
removal and replacement. Electrical, fluid, air, and gas lines to other 
modules, externally mounted equipment, and to a docked orblter are provided 
through the interface connections at the mating ports. Air circulation Is 
provided through the interface with the command module, assisted by fans 
Internal to the energy module. 

Station access to the orblter In Its normal docked location is through 
the energy module. 

The four berthing ports on the center section are interfaces for two 
solar arrays, a deployable radiator and an airlock, all detachable and 
packageable within one orblter cargo bay. The Initial solar arrays, which 
provide a total of 50 kW of power, are replaced for the growth configuration 
by arrays that provide 100 kW of power. 

Command Module . The command module Is of a similar construction as the 
energy module except Its longer center section contains two segments of four 
berthing ports each and a cylindrical section. Its total length Is 40 feet. 
The volume above deck houses staterooms, hygiene facilities, galleys, dining/ 
ward room, and medical /exercise facility. All of these provisions are 
removable for the growth phase. A station operations console also located 
within this volume remains throughout the life of the station. The volume 
below deck Is used primarily for subsystem equipment. 

A combined Internal arrangement of both the energy and command modules 
provides two Independent pressure volumes. Each volume has an Independent 
environmental control and life support subsystem capable of supporting both 
volumes. Redundant station control consoles are located In each volume. The 
main staterooms are In Volume II with back-up sleep stations In Volume I. 


Payload Service Assembly (PSA) , The PSA Is the principal element of the 
Space Station on which most of the payload servicing activities will take 
place. The service bay will be utilized In a similar capacity as the orbiter 
payload bay (l.e., for servicing free flyers, housing research experiments on 
pallets, storing spares, etc.). The back side of the service bay Is the 
service fixture where a mobile manipulator arm and two sets of payload 
retention devices on carriage assemblies are featured. The service fixture 
will be utilized for servicing OTV's. The two retention devices will allow 
simultaneous servicing of two OTV's. In that event, the service fixture 
manipulator arm Is complemented by the service bay manipulator arm In 
servicing the OTV's. Both manipulators are operated by crewmen within the 
control module, which Is permanently attached to the service bay structure. 

The control stations simulate the Shuttle aft deck from where tne RMS Is 
controlled and operated. Observation windows similar to those of the Shuttle 
are also provided. The other end of the PSA features a mating port where 
incoming OTV's dock for subsequent transfer to the service fixture for 
servicing. The service fixture manipulator arm Is used for OTV transfer to 
the service fixture. 

Logistics Module 


The logistics module assumes the same basic exterior configuration as 
the other pressurized elements. This includes standard end cones, frames, 
cylindrical body section, end Interface ports. A mating port Is attached to 
one end cone while a pressure plate seals the second end cone. On the~ 
periphery of the second end cone, a structural skirt is attached to protect 
external tank installation provisions. The total length of the logistics 
module Is 23 feet. 

Inside the logistics module are two structural bulkheads that coincide 
with the external frames. In the center of each bulkhead is a 40-Inch 
diameter opening. On both sides of each bulkhead, pie-shaped, 20-1nch-deep 
storage compartments with hinged doors are mounted to provide the majority of 
storage space. Storage compartments are also provided on the end cones. On 
the near end cone, 10-Inch deep by 50-Inch wide compartments are mounted 
around the periphery. On the far end cone, a 48-inch-dlameter by 24-1 nch- 
deep freezer Is provided. Around the freezer, additional storage compartments 
are mounted. The Internal arrangement features 36-inch-wlde aisles betweeen 
storage compartments and between each storage compartment and the end cone. 
This width Is sufficient for opening storage compartment doors and for 
crewmen, carrying supplies, to easily maneuver. Of the total logistics module 
Internal volume of 2,565 cubic feet, 1,014 cubic feet are available for 
storage, which satisfies the average requirements for a 90-day resupply period 
for an eight -member crew. 

GROWTH STATION ARCHITECTURE 

Tne growth Space Station, designed to provide a habitable and working 
environment for a crew of eight, Is assembled by building on to the Initial 
Space Station. The core station modules added are? Habitat Module 1, Habitat 
Module 2, and a life sciences module that Interconnects the two habitat 
modules. These modules are arranged, as shown In Figure 3-2, to provide two 
exits out of each occupied area and to provide dual Independent volumes for 
emergency safe havens. 







Growth Station Configurat ion 

The standard modular construction elements described earlier are used 
for the 4Q-foot-long habitat modules. The interior floor location, aisle 
widths, false celling, end Integrated environmental protection subsystem are 
also Incorporated. The structural arrangement of the life sciences module is 
Identical to the command module except that the pressure bulkhead separating 
Volume I and Volume II Is not required. 

The Internal arrangements and featu res of each module - are-de sc rltt e d - fn - 
this section. The build-up sequence from the Initial station architecture to 
the growth station arrangement Is also described. 

Habi t at Module! . Located in the living/working area of this module are 
four crew staterooms, the galley, a dining/ward room/quiet recreation 
facility, a hygiene facility without a shower, and a larger volume, 490 cubic 
feet. Identified as a workshop/laboratories facility. The requirements for 
this facility have not been fully defined. Each stateroom, nominally 
accommodating one crew member, has the capability to accommodate two during 
overlap or emergency. The required components of the subsystem are located In 
the equipment bay below the floor. The end cones provide storage for 
infrequently needed Items and access to the interface connectors. 

Habitat Module 2 . Located in the living/working volume of this module 
are four new staterooms of the same configuration and capability as those 
located In Habitat Module 1, a back-up "alley with 21-day food storage 
capability, a medical /exercise facility, a full hygiene facility including a 
shower, and a control center containing the station operations console. The 
subsystem equipment is located in the equipment bay. Similar to Habitat 
Module 1, the end cones provide storage for infrequently needed items and 
access to the Interface connectors. 

Life Science Module . This module Is divided Into two volumes by 
partitions above and below the floor. The resulting areas are utilized for 
life science research (animals) and medical research (humans). A slight 
pressure differential between the volumes will contain any animal odors. The 
research facilities are located in the working volume above deck. Only the 
air circulation equipment has been identified, to date, to support this 
facility. Consequently, the equipment volume below the floor is available for 
the Installation of special equipment or storage. The end cones provide 
storage for four emergency escape subsystems and other Infrequently required 
Items as well as access to any Interface connectors. 

Command Module. The command module will have all of the crew 
habitability provisions, such as crew staterooms, hygiene facilities, galleys, 
and dlnlng/wardroom removed after the build-up has been completed. Also 
removed will be the medical /exercise facility and the back-up station 
operations console. All of these facilities are now contained in Habitat 
Modules 1 and 2. The scar wiring and plumbing lines will remain. The 
subsystem components in the equipment bay are retained to maintain the 
redundancy and safety requirements. The space now available In the living/ 
working volume can be utilized for laboratories and workshops, which have yet 
to be defined. 
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4. SCENARIOS 


During this study five scenarios were selected as those which typify 
high risk space station activities. These scenarios are space station 
activities, and: 


1. Space Station Build-up 

2. Berthing 

3. Material Processing 

4. Fluid Transfer 

5. Extra Vehicular Activity 

The Extra Vehicular Activity Is discussed separately In Section 6 of 
this volume. 

APPROACH 

Each scenario was addressed using the logic shown In Figure 4-1. The 
objective was to Identify safety critical tasks and related hardware, where 
applicable, In order to develop safety criteria ana guidelines for space 
station design and operations. In looking at each of these scenarios the 
related threats were the study drivers. These threats are shown in Table 
4-1. 


TABLE 4-1 SPACE STATION CREW SAFETY 
THREAT LIST 

o Fire 
o Leakage 

o Tumbling/Loss of Control 
o Biological or Toxic Contamination 
o Injury/11 1 ness 
o Grazing/Collision 
o Corrosion 
o Mechanical Damage 
o Explosion 

o Loss of Pressurization 
o Radiation 

o Out-of-Control IVA/EVA Astronaut 
o Inadvertent Operations 
o Lack of Crew Coordination 
o Abandonment of Space Station 
o Electrical Shock 
o Meteoroid Penetration 
o Stores/Consumables Depletion 
o Intrusion/Attack 
o Structural Erosion 
o Orbit Decay 

o Loss of Access to a Hatch 
o Temperature Extremes 
o Debris 

o Free Orbit (EVA Astronaut) 
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The scenario study sub-tasks w.rs conducted as follows; 

1. Study logic per Figure 4-1. 

2. Prepare the scenario task logic diagrams 

3. Identify Safety Critical tasks 

4. Prepare a task/crlterla/guldellnes matrix 

The product of this sub-study expands the safety criteria and guidelines 

files. 


Scenario assessment for this study was limited to gross task 
definition. The understanding is that a detalled scenarlo task plan will be 
developed eventually for each defined activity. Assuming that Figure 4-2 
typifies the approach taken to develop scenario task plans, a risk assessment 
would be made for each sub-task block. Hopefully, the safety criteria and 

guidelines developed under this study would be an adequate safety baseline to 
provide guidance for task development. 

SPACt STATION BUILD-UP 


The assumed sub-task elements of the space station build-up scenario and 
their relationships are shown in Figure 4-3. To ensure that the defined 
build-up tasks are credible, full-scale, high-fidelity dry-runs are requited. 

A fallout of this approach Implied in Figure 4-2 is a detail task plan. The 
plan is the tool used for detailed risk assessment of the eventually defined 
but ld-up scenario. 


The safety critical tasks, earth-side, are not too different from those 
encountered in day-to-day shuttle operations. Basic requirements for the 
shuttle related ground and flight safety critical tasks are contained in 
HHB1700. 7A and KHB 1700.7. The build-up peculiar segments begin (See Figure 
4-J) with Place in Orbit". The Table 4-2 matrix addresses each of the 
asterisked sub-tasks, the applica k le threats, and related criteria and 
guidelines listed in Vol. IV. 
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TABLE 4-2 RISK ASSESSMENT MATRIX - BUILD-UP 
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TABLS 4-2 (Cont'd.) RISK ASSESSMENT MATRIX - BUILD-UP 
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BERTHING 


. • , By def n l t1on i a bert,,1 n9 process consists of all operations necessary 

* wo * nd ®P en <tent orbiting units Into one Independent unit. In this 
study, one of the two Independent units Is the Space Station. The other Snlt 
can be Shuttle Orblter, OTV/OMV, or other vehicles. 

, rtrt<c 5^ th1ng P ro ? e f s b ®comes essential In supporting the Space Station. 
Logistics and personnel transfer, whether It Is of routine or emeraencv/rescue 
nature, can be accomplished through the berthing process. en,er 9« rtc y' rescue 

« sac s » 

loss of the station, but also of the on-board crews (if, for instance EVA 

a°th^ugh slfltTSysi™" 9 '* 8 ,ery Cr,tical 
be usabl*e:° f ^ berthing conce P ts Proposed, the following concepts appear to 


1) 

2 ) 

3) 


Direct berthing (hard berth) 

Extendable tunnel berthing (soft berth) 
Berthing to the Space Station holding frame 


u . The direct berthing concept. Figure 4-4, does not require Remote 

StEil a nlh^ Sy i tem u (RMS u a f s1stance * The active element (for instance, the 
withnn? grb ^ ter) mokes the Initial contact, berthing port to berthing port 

mllJ ™nJ2ST dl f t ® * s ? 1stanc e; the integrally attached berthing mechanises 
h?c?< f ?? ct l or ni ? a capture. The direct berthing concept requires the 

wntJSl t IyJp?Lli e Jji ively ] a ^ 9e ener 9y levels because of the coarse velocity 
rnnrlnl S!J!! ec * e ? ^°j propulsive maneuvers of the large masses involved. The 
concept was employed during Apollo-Soyuz mission; the berthing operation was 
performed by aligning the mass centers of the two vehicles. 

The extendable tunnel berthing concept. Figure 4-5, uses an extension 

extiS2l S «A mo T 5? berth1n 9 mechanism, on one of the two berthing vehicles, 

d J?tance away from the vehicle before effecting initial contact 
tun / ft *r capture, the mechanism Is then retracted to draw the 

pytAutahil 6 * t ° 9 ? t J er J? r ri 9 idizin 9« The distinguishing features of the 
!?*?i» , 2i 1 Ia t ! nne1 b ® r th1ng concept are: 1) it provides a long separation 
?!Sn5t let veh l c1es at trte Instance of first contact, 2) It provides 
iH b IUK after capture and during retraction; 3) It affords a long stroke 
concept ^ neSS attenuat * on capabllty. RMS use becomes optional for^thls 

The berthlng-to-hol ding-frame concept uses an open-center holding frame 
JjJ J|J? s P a ®® sta t1on. Retractable booms from the frame draw and lock the 
nSM*i!!i 0 h bi Sr t0 * the h ? 1d1 ? 9 frame. A good analogy would be a ship (the 

require RMs'JssI stance. the h ° 1 '”" 9 fri " e) ' Th,S c0 " cept d0 * s " ot 


1/1 I'l 


• : • . i . is or vumki) 
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In this study , we have chosen the direct berthing concept to demonstrate 
our scenario screening process. The assumed sub-task elements that comprise 
the berthing scenario flow are shown In Figure 4-6. The asterisked sub-task 
elements are considered safety critical as shown In Table 4-3, Indicating the 
applicable threats. An assessment was made of each of these safety critical 
tasks to ensure the proposed safety criteria and guidelines are present. As 
an accommodating strategy, the Table 4-4 Risk Assessment Matrix summarizes the 
task-crlterla/gul deline relationships. 



Figure 4-4 Direct Berthing 



SEAL TUNNFI 



•OHt EXTENDABLE TUNNEL DOCKING STSTEN CONCEPT ADAPTED FAOM A CONCEPT CONSIDEAED 
POA THE APOLLO t$ SHOWN. IT EMPLOYS A DOCKING POAT ATTACHED TO ONE END OF AN 
ACCOAOI AN-LIKE BELLOWS TUBE, EXTENDABLE TO APPKOXIMATELY *n (10 FT) IN LENGTH. 
TESTS IN TWO-OIHliNSIONAL SIMULATED DOCKING OF THE APOLLO USING THIS SYSTEM SHOWED 
THAT IT WAS FEASIBLE 4 HAO ND MAJOA PA0BLEM5 



Figure 4-5 Extendable Tunnel 
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TABLE 4-3 - DIRECT BERTHING SCENARIO 
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TABLE 4-4 RISK ASSESSMENT MATRIX (DIRECT BERTHING) 
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MATERIAL PROCESSING 


exc 1i 1 1 ^concepts of tT^nfted^tersSlce^rSg^am This 

. nH su 9 S®sted projects is space manufacturing of unique products 

and materials for earth use or for use in orbit. Space offers the ootentlal 

™ J2i"?„ n E t 0P " 0,C I er° ducts ; " f " processing maLrilu tha? ?a“Se Jled 

^ e ?f th t° make new, better or lower cost products. The presence of » inw 
gravity environment of space enables us to process material ^more effteteStlv 

material C orocessina n ? n ?? rth# A . m1c gravity environment, with respect to * 
anS bJS foTSlJHiulS! "" e " $e ° f con,ect,on - sedlmentatl on/buoyancy , 

Initial efforts to study material processing in a low qravltv 
environment started In the 1960's. Engineers tried to study 9 whateffect<; 
low-g would have on propellants in rocket stages that wro coanira b«Ln 
anv^ 0 " ^tal that was ^Iten for welding in building large structures 

ItnHt/ d hH] 0pe h int ° a ? as1c test P r °9 ram us * n 9 aircraft and a drop tube to 
study basic phenomena in a few seconds of low-g. Then three AdoIIo funhte 

carr ed equipment for casting immiscible me?als and refim^g cerilln iyoes of 

Ski ab duSSo^pH’r ? volved ? lar9er P rc 9 ram to be conducted Jboafd’the 

half of thI n flnlno"c' 3 * Su ? ce ? s led more low-g experiments aboard the US 
h * of the Apollo-Soyuz missions in 1975. Currently, we are conductina 

?nJinHf 1 M Pr °^ SSin9 e *P eriraents aboard the Shuttle /Spacelab. Such experiments 

sfstemfCFES? aSrSrw" ReaC J° r {MLR) ’ Coa tinuous Flow ElectwphJnwI. 
bystem(CFES) , and various experiments as Get Away Special (GAS) oavloads 

select^those°exnaHmpnr >d ^h e + ? y the previous experiments, we are able to 
mankind^ experiments that have greater economic potential and utility to 

The applications for material processed in space Include to date a 
wide variety of electronic, optical, and biological uses Analysis of * 3 
ex P eri y e " ts and current plans for future efforts suggests that 

i?l^mnf?" 1 !:^l? 1 1 ven f ures wi11 probably be associated with the production of 
electronic material, glasses, and biological products For pvamnio 
products that exhibit greater potential IncluSe: p1e> the 


1 ) 

2 ) 

3) 


Near-perfect Gal Hum Arsenide (GaAs) integrated circuits 
Exotic glasses for fiber optics; 

Interferon (a promising biomedicine) 


... s P ace station offers an excellent opportunity for us to advance to 
full-scale production phase of material processing, culminating In commercial 
T^ e 9 P?? e Station provides several location options for 
material processing: 1) inside the station; 2) outside the station •• with 

c P o oro?J?L e ? U i Pm |f tS att J ched t0 the stat1on i 3) outs1de station - as a 
co-o siting free flyer. For example, MLR and CFES belong to the first ODtlon- 
s "type experiments to the second option; experiments mounted on Lonq * 

Ourat on Exposure Facility (LDEF) to the last option. Regardless of their 

1nw1varont , ' , Fo? t lStlnEI° C raf! 9 exper, ”5" ts possibly need sosie type of crew 
inv^vement. For Instance, GAS-type experiments might require EVA while 

0*nil P TrISsf^ EVA USlng Man Maneuver1n 9 Unit (MMU) or an 




In this study, we have generated a typical material processing scenario, 
as shown In Figure 4-7, In order to demonstrate our scenario screening 
process. This generle scenario Is mainly hased upon the activities Involved 
In conducting the CFES experiment. Table 4-5 relates the threats to task sub- 
elements. Table 4-6 contains the risk assessment matrix. 



Figure 4-7 Material Processing Scenario 
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TABLE 4-5 - MATERIAL PROCESSING SCENARIO 



_ 



0J 

* 


u 

CD 



•r 

ffl 



X 

O C 

}§ 


00 

h- o 

Q 

■ 

H; 

“ v 'r* 


_ 

< 

r- 4-» 

i— 

“ 

UJ 

m « 



oc\ 

U c 

o 

•** * 

X 1 

'f— «r* 

•r- 


H’ 

cn B 

C 



O <0 

fO 



#~ -P 

XI 

- 


O C 

o 



*r- O 

ro o 

£ 


3 





l 


LJ 


o 

If— 


•r~ 

X 


X C 

o 

c 

o o 


o 

1 — •#- 


-r— 

-M 

r~> 

■M 

(— m 

ra 

fi 

fry c 

o 

C 

U 'r~ 

*r- 

♦r— 

■r- JE" 

cn 

€ 

CD 

a 

a 

O p 



r~* C 

o 

c 

o o 

'F* 

CO 

<3 

•r- t > 
CQ 



TABLE 4-5 - MATERIAL PROCESSING SCENARIO (CONT’D ) 
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TABLE 4-6 RISK ASSESSMENT MATRIX (MATERIAL PROCESSING) 



FLUID TRANSFER 


Orbital fluid transfer operations play a critical role in supporting the 
Space Station and in carrying out a "fluid-depot" function of the Space 
Station. The fluids that can be transferred to and from the Space Station 
range from drinking water to propellants. Table 4-7 contains a list of 
candidate fluiJs. As shown In Figure 4-8, there are various vehicles that can 
Interface with the Space Station during fluid transfer operations. 


Table 4-7. LIST OF CANDIDATE FLUIDS 
FOR ORBITAL FLUID TRANSFER 


PROPELLANT 

LIQUID HYDROGEN (LH 2 ) 
LIQUID OXYGEN (LOp) 
MONOMETHYL HYDRAZINE 
NITROGEN TETROXIDE (N 2 0 4 ) 
HYDRAZINE (N 2 H 4 ) 

PRESSURANT 

NITROGEN (GN 2 ) 
HELIUM (He) 

"ECLSS" TYPE 

BREATHING OXYGEN (GOo) 
FREON 

NITROGEN (GN 2 ) 

WATER (DEIONIZED) 

WATER (POTABLE AND WASTE) 

MISCELLANEOUS 

CLEANING FLUIDS 


Three different fluid transfer techniques are considered in this study. 
The techniques are: 1) transfer-via-condults technique; 2) fluid module 
exchange technique; 3) hand-carried-cannister technique. 


The transfer-via-condults technique. Illustrated In Figure 4-9, uses 
conduits (for excmple, pipes and hose) as fluid transfer lines. This 
technique requires either Remote Manipulator System (RMS) assistance or Extra 
Vehicular Actlvty (EVA) in connecting a fluid transfer line from a supply tank 
on the supplier vehicle to a matching receiver tank on the receiver vehicle. 
The technique also requires a fluid transfer line for each fluid to be 
transferred. It Is to be determined whether to transfer one fluid at a time 
or to transfer several fluids simultaneously. The latter requires some sort 

of systematic control In connecting several fluid lines so as to eliminate any 
confusion. 


Instead of connecting lines between the two vehicles, we can directly 
exchange fluid modules. The fluid module exchange technique, shown In Figure 
4-10, uses a minimum of two RMS's to replace an empty fluid module (EM) on the 
receiver vehicle with a refill fluid module (RM) on the supplier vehicle. The 
technique has the folowlng constraints: 1) module exchange activities must 


52 












tako place within the reach of the RMSs; J> * . 

disconnects between the modal e and the recelv tQ determ1ne the size of 

proper scheduling of fluid consumption shou Involved during the fluid 

SrfSrf?a 

TO^HahPHio\ccount C the^pressur^di f f erenti el^enerate^f ron "the ’ vacuum of 
space If the transfer requires EVA. 

In general .fluid transfer °t' ers ^“? s sh b !?“^ n t “* s ^ eperationf ihile 
SStS Sl2!V.liafin“clotrro*i™Uyi tho vehicles «t be Within 
the reach of the RMSs. 

applie^r^^ 

SsKM 

the supplier vehicle to *j he $ more* hazardous operations encountered In 

operations are considered o"®^. the U e°c!n h however, reduce the actual risk to 
orbital fluid transfer options, Table 4-9 shows 

a lower level by using proper safety aDorooriate safety criteria and 

"tftrs Si «• ° f ° ur 

scenario screening process. 



Figure 4-11 Fluid Transfer Scenario 







TABLE 4-8 - FLUID TRANSFER 
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Orbiter and SS. 


TABLE 4-8 - FLUID TRANSFER (CONT'D.) 
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TABLE 4-9 (Confd.) RISK ASSESSMENT MATRIX (FLUID TRANSFER) 



INT-134, INT-I40 


5. ESCAPE AND RESCUE 



Escape and rescue provisions are a design requirement for any manned 
system. The purpose of this section Is to discuss the various escape and 
rescue alternatives for an Orbiting Space Station. 


The Space Station crew safety threats are discussed In various sections 
in greater detail. They ate listed In Figure fi-1 and are grouped according to 
whether or not it. would require Immediate response, whether there was some 
delay allowable or a slow response could be encountered to correct or 
counteract the tnreat. The Inset graph illustrates uhe comparative "time 

until iirlvpycp 1 mnart " 4- -1 4- ^ rr ± j . j r ^ , 


The threats which could result In escape or rescue are presented In 
Figure 5-2. Of those which allow delayed response, escape can be handled by 
personnel going to a Safe Haven, and can be rescued by the Shuttle. For those 
threats requiring an Immediate response, the problem Is to discern If escape 
or rescue time Is available. If escape or rescue time Is not available, the 
risk will have to be accepted for threats of these magnitudes because If they 
happened, the crew would not be able to escape from them anyway. The ones 
that fall Into this category would be large fires, large tumbling rates, big 
explosions, rapid decompression of multiple volumes, possible metorold 
penetration, debris, etc. 

... If escape time Is available, then what portion of the crew would most 
likely be involved? All crew members would probably be involved for threats 
such as a major fire, explosion, mechanical damage, etc. For other threats 
such as biological contamination or depletion of consumables, possibly only 
naif of the crew may be Involved. However, the medical injury/illness issue 
Is probably the only threat that would require only one crewman to escape or 
be rescued. Table 5-1 shows the probable causes for less than the full crew 
to escape from the space station. 
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than the time to adverse Impact, then there Is a potential of controlling or 
doing something about the threatened situation. However, if the reverse Is 
true, then the tnreat situation is one that dictates an Immediate need. 
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vmm 

TUMBLING/ 1055 0T CONTROL 

BIOLOGICAL OR TOXIC CONTAMINATION 

INJURY/ ICLNCiiS 

GRAZING/ COLLISION 

CORROSION 

MECHANICAL DAMAGE 

EXPLOSION 

LOSS OP PRESSURIZATION 
RADIATION 


X 

X 

X 

X 

X 

X 


OUT-OF-CONTROL IVA/EVA ASTRONAUT 
INADVERTENT OPERATIONS 
LACK OF CREW COORDINATION 
X TO X ABANDONMENT OF SPACE STATION 
X METEOROID PENETRATION 

X STORES/CONSUMABLES DEPLETION 
X STRUCTURAL EROSION 
X ORBIT DECAY 

X TO X LOSS OF ACCESS TO A HATCH 
TEMPERATURE EXTREMES 
X DEBRIS 

FREE ORBIT (EVA ASTRONAUT) 



Figure 5-1 Space Station Crew Safety Threat List 


THRFATS 
[ WHICH COULD 
RESULT IN 
ESCAPE OR 
RESCUE 


THREATS 

REQUIRING 

IMMEDIATE 

RESPONSE 


• FIRE 
•TUMBLING/ 

LOSS OF CONTROL 
•MECHANICAL 
DAMAGE 
•EXPLOSION 
•DEPRESSURI- 
ZATION 
•METEOROID 
PENETRATION 

• DEBRIS 

•INJURY/ILLNESS , 



THREATS ALLOWING 
DELAYED RESPONSE 


•CONTAMINATION 

TUMBLING/ 

LOSS OF CONTROL 
•EXPLOSION 
•CONSUMABLES 
DEPLETION 
•MECHANICAL 
OAMAGE 
• 'RAZING/ 
COLLISION 
•RADIATION 
•ORBITAL DECAY 
INJURY/ILLNESS 
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APPLICABLE THREATS 
• INJURY/ILLNESS 


APPLICABLE 

THREATS 

•BIOLOGICAL 
CONTAMINATION 
•STORES/CONSUM- 
ABLES DEPLETION 


ACCEPT RISK 
FOR THREATS OF 
SELECTED MAGNITUDE 


THREATS OF 
CERTAIN 
MAGNITUDES 

•FIRE 

•TUMBLING/LOSS OF 
CONTROL 
•EXPLOSION 
•DEPRESSURIZATION 
•METEOROID 
PtNETRATION 
• DEBRIS 


•FIRE 

•tumbling/ 

LOSS OF CONTROL 
•EXPLOSION 
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GO TO SAFE 
HAVEN 


RESCUE BY 
SHUTTLE 


Figure 5-2 Threats Requiring Escape/Rescue 
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Table 5-1. WHAT WOULD CAUSE ESCAPE OF LESS 



t 


1 HAN? 


o SOLE SURVIVOR 


?. HEN? 


a TWO SURVIVORS 


o 


PHYSICAL MEDICAL o 
ISSUE (CUT. SOME 

BURNS) 


INDIVIDUAL CREWMAN o 
MEDICAL ISSUE 
REQUIRING CONSTANT 
AID BY MEDIC 


o PHYSICAL 

o PSYCHOLOGICAL ISSUE o PSYCHOLOGICAL 

o INABILITY TO o DECEASED 

RECONNECT WITH 
SPACE STATION 


THAU FULL CREW 


i MEN? 


THREE SURVIVORS (REMOTE 
PROBABILI1 Y ) ESCAPING 
IMPENDING DISASTER 

DECFASED 


o DECEA r 


ESCAPE AND RESCUE OPTIONS 

Tne options for escape and rescue are divided into 5 categories as shown 
In Figure 5-3. Option A provides emergency escape vehicle! s) at the space 
station which enables escape to earth. The actual rescue is performed by the 
Navy or Air Force. Option B provides an Orbital Transfer Vehicle (OTV) for 
relocating the crew to - a second station. Spare parts or equipment may be 
obtained for the return and repair of the space station and continued 
operations? An external Safe Haven is used In Option C for the crew to await 
rescue by the Orblter or friendly vehicle, then return to earth. In Option D. 
an Internal Safe Haven is available. The Orbiter or a friendly vehicle can 
provide the rescue operations; or a supply vehicle can be sent for Space 
Station repair & resumption of operations. In Option E, the Orbiter is 
available for escape to earth. 

ESCAPE/RESCUE DISCRIMINATORS 

The prime discriminators for the escape/rescue system options are cost 
response time, crew size, technology risk (new technologies required) and 
types of calamities accommodated. The five basic escape/rescue system options 
are shown on Figure 5-4 along with the discrlmintor assessments. For Option 
A, emergency escape vehicles located at station, costs for safety is charged 
100%. Because of the kinds of vehicles involved, a minimum of two are needed 
to be effective. Response time varies from 10 minutes to 1 1/2 hours. The 
crew size varies from 1 to 4 per vehicle. Technology risk ranges from medium 
to very high. Some of these concepts have a minimum of analysis and very 
little If any development tests. The types of calamities that can be 
accommodated are shown. If the crewmen go to a second station, Option B, no 
costs are charged to safety because the capabUJty Is already built into the 
second station. It is simply a matter of using 0TV4or transfer. Time of 
response will vary pending the relative positions of the stations. Technology 
risk is medium, the size of the crew is not known. For the external Safe 

C; J c °? ts wou1d !? e charged to safety because it is not needed to 
keep the space station operating. Response time would be approximately 1 

hour, crew size could be 8 people, a very high technological risk & it would 
acconmodate the calamities as shown. For the Internal Safe Haven, Option D, 
total costs are a part of the mission continuation. The response time is very 
short, risk is low, it can handle all the crew & can accommodate most of the 
calamities, lhe orbiter Vehicle, Option E, would have no costs for on-station 
mission continuation. The response time could be as short as 15 minute for 
on-station. Otherwise, it depends where the Orbiter vehicle is located at the 
time of an emergency. The Orbiter could handle a full crew and all calamities 
including these injury/illness cases. However, there is a potential problem. 
In the event of a rescue mission that occurred concurrently during a crew- 
changeover (about 16 people plus the Orbiter crew), a second orbiter may be 
required to handle this condition. 

ESCAPE SYSTEM CONCEPTS 

Escape system concepts (Option A above) which are capable of returning to 
earth, lall into two broad classes, ballistic entry types and lifting - body 
,y p ® s * J he c l ass lfi ca ti° ns ® r e a function of the aerodynamic characteristics 
(body shape, center of mass, center of pressure and aerodynamic coefficients). 
The pure ballistic types have a lift over drag ratio (L/D) equal to zero. 

These may be further subdivided within categories of medium and high L/Ds. 

landing area ? hav1n9 fcAtens ran 9 e a "d crossrange distance to the potential 
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All escape system concepts are sensitive to crew size stowaoe and 
deployment kinematics, orbital endurance, aerodynamic characteristics 
recovery mode, space station Interfaces and degree of indeoendenev and <»*tnn+ 
! support. Each escape sy-ste“?e“e2ed^ ^?oSlSld ^ea”? or 

arid disadvantages In the sensitivities listed; 3 none could 

“ f?r single-place escSpe 'system?! WdIJle? fu,?y expaniahJe and 
semirigid structures are more readily Integrated Into space station structures 
and require less storage space. They are usually the llahtest in IS 

js,2»T.si£ ^ 

cS?' r? P ^ 

on iMrVfLSJbl 1uirtS e d^wnrr tS C# ? P ] ace very 9reat or im P 0S ^ble demands 
on man s capabilities to do work unrestrained In the zero-g environment. 

requi rements^and Smv jl/ Un ; t * ons ’ overa11 systems and subsystem support 
requirements, and capabilities Innerent to crew survival are shown in Figure 



Figure 5-S. Typical Sequential Flow of Events 
After Space Escape System Separation 
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c o A Jl st of ty P ical esca P e vehicles which were reviewed Is shown on Table 

smse :« 5 d 

company responsible for the design concept. These escaoe svstens arf 6 

size /weight, type of recovery and state-of-the-art In technninZ tk! 

£Tl!!J n9 conc * pts are H*ttd as "Other" and lnc-1 ude the NASA ^scuI ball 
concept, second station. Shuttle. Hemes and an AF Low G Entr/Sle 


Table 5-2 LIST OF TYPICAL VEHICLES 


DEPLOYABLE 

AIRMATE (GOODYEAR) 
RIB-STIFFENED (ROCKWELL) 
PARACOME (MDAC) 

MOOSE (GE> 

ENCAP (?) 

SAVER (ROCKWELL) 


RIGID 

MOSES (GE) 

EGRESS (MMC) 

LIFE RAFT (GE) 

EEOED (LOCKHEED) 

SPHERICAL HEAT 
SHIELD (ROCKWELL) 

APOLLO CM (ROCKWELL) 

LIFTING BODY (NORTHROP) 


OTHER 

RESCUE BALL CONCEPT (NASA) 
SECOND STATION (ROCKWELL) 
SHUTTLE 
HERMES 

AF LOW G ENTRY VEHICLE 
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TABLE 5-3 ESCAPE/RESCUE DISCRIMINATORS 
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TABLE 5-4 PARAMETRIC EVALUAT1 A ESCAPE, RES SURVIVABILITY CONCEPTS 
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launch vehicles not required. 


A review of the foregoing discussions relative to potential threats and 
escape/rescue requirements, shows that most threats can be eliminated by 
design or operational solutions with the exception of Injury or Illness. Due 
to the hlgn entry G's encountered, the Qrblter Shuttle vehicle Is the only 
concept currently capable of performing Escape or Rescue operations for 
seriously "111 or Injured" personnel. 


6. EXTRA-VEHICULAR ACTIVITY 


INTRODUCTION 

Extra -Vehicular Activity (IVA) Is that activity conducted external to the 
primary shirtsleeve environment afforded by the National Space Transportation 
System (NSTS). the Space Station, any future planned habitability areas (OTV 
manned pod or Lunar Base habitability modules). The EVA function in the past, 
except for Apollo lunar surface and cis-lunar exploration, has usually been a 
contingency function or an experimental endeavor to determine crew 
capabilities. For the Space Station, EVA is planned as a normal activity. 

The contingency element of EVA is not defined at this time. The purpose of 
this report section is to address the threat impact on EVA crewmen and systems 
and discuss current EVA systems and their related safety issues. 

7HREAT/EVA IMPACT 

Twenty-five threats to the space station program have been identified 
ducing this study. Table 6-1 lists these threats and indicates their impact 
on the EVA systems. Each related threat is discussed. Threat definitions are 
included in Appendix B to Volume IV of this report. Many of these threats 
will be addressed, hopefully in the planned advanced EMU study for FY85. 

Fire 


Fire Issues that relate to EVA are similar to those discussed in Section 2 
of Volume II. Design approaches to preclude the onset of fire are classical, 
that is, 1) proper material selection, 2) isolating the fuel -oxidizer-ignition 
triangle legs and/or 3) inert affected volume with a non-volatile gas or by 
evacuating the volume. Electrostatic charge, as an ignition element inside 
the suit system as well as within the volume where suit storage, maintenance, 
donning and checkout take place should be addressed specifically as a function 
of space stati on/EVA systems Interface design. 

Leakage 


This threat concerns itself with leakage internal to the system volumes: 
the suit system, the ECLSS system and the mobility system. The strategies for 
threat accommodation are standard industry approaches" 1) careful material 
selection for faying surfaces, 2) attention to seal selection for long life 
material compatibility, 3) maintainable design allowing ready seal removal, 
replacement and system pressure checkout in orbit. 

Tumbling/Loss of Contro l 

EVA suit systems and Environment Control Systems (ECS) asymmetrical 
venting and Mobility Systems attitude control runaway are threat Issues. The 
concerns can be handled with Judicious application of subsystem redundant 
design. 
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TABLE 6-1 THREAT/EVA IMPACT 


THREAT 

1. Fire* 

2. Leakage 

3. Tumbling/Loss of Control 

4. Biological or Toxic Contamination* 

5. Injury/Illness* 

6. Grazing/Collision 

7. Corrosion 

8. Mechanlcai Damage 

9. Explosion* 

10. Loss of Pressurization* 

11. Radiation* 

12. Out of Control IVA/EVA Astronaut 
13 Inadvertent Operations 

14. Lack of Crew Coordination 

15. Abandonment of Space Station 

16. Electrical Shock 

17. Meteoroid Penetration* 

18. Stores/Consumables Depletion 

19. Intrusi or/Attack 

20. Structural Erosion 

21. Orbit Decay 

22. Loss of Access to a Hatch 

23. Temperature Extremes 

24. Debris* 

25. Free -Orbit 
*D1scussed in Volume II 


Suit 
j System 

X 

X 


X 

X 

X 
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EVA IMPACT 
Env. 

Control 
System 


X 

X 


X 

X 

X 

X 

X 

X 

X 

X 

X 


Mobility 

System 
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X 

X 

X 

X 

X 

X 

X 

X 
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X 

X 
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X 

X 


X 

X 
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I End | 
I Effectors I 
I I 
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Biological or Toxic Contamination 


Suit system contamination* as well as ciiit ere ~ ~ n *. am j . . 

ra7*SS?SS. 

Injury/Illness 

In existence at NASA ^erResearch^ente^-^.M ? 9 { “ such as that is 

pli m E?fL?t h ? 1& M?‘anS ha^^l n S a4 P 3l^Ss JS'l'LH TS^L. 

a K«Jf a,1P Co r ners " Ins Pect 1 on of systems for damaging protuberances anrf 

sS?flces? etrati0n W ° Uld m1n1m1ze the r1sk from *ha” U 3rSw t Jnd U abr{S5S UPe 
lSStffi^d!“ n A d !fISl 0r ? UU operationa1 hazrrfltme% r es%ho n U ld A b e 

other similar sensory syrteJ^rlentat^n' aids'll be gemaHl! , ’ e, " ,et • a " d 

I5n“rrona^ n ^ElSsiLel"\r r S*!fj!^ 

Sm£2.1?fe S 1 ?"?*" s jsss'pM* S?"^" a 


Injury/Illness, In general, Is discussed In Section 4 of 


Volume II. 


Grazing/Collis ion 


This threat affects all EVA systems that can be damaged by grazing/ 
collision contacts. This issue is addressed best If computer simulation 
modeling of all EVA systems in storage, donning, checkout, operation, doffing 
and maintenance were available to Identify critical contact points for safety 
assessment. The risks associated with this threat would seem to be minimized 
if a hard suit system were planned for space station operational time period. 


Corrosion 

Strategies to accommodate this threat EVA systems are considered good 
design practice as expected to be employed in other space station design 
effort. Specifically, EVA systems inspection for corrosion would be a part of 
the normal maintenance and Inspection procedures. 


Mechanical Damage 

EVA systems design should consider damage tolerance to a definable level 
as most EVA systems are subject to movement, handling, maintenance and storage 
inside and outside the space station. Where mechanisms are required, 
enclosing them to ensure free floating debris/foreign objects would not 
disable the function is required. 


Explosion 

EVA systems exposure to the explosion threat - pressure systems and 
volatile fluid systems - is similar to that described for the space station in 
Section 5 of Volume II. 


Loss of Pressurization 


Accepting the EVA suit as a habitable volume, this threat is discussed in 
general for the space station in Section 6, Volume II. The additional threat 
concern could be resultant effluent venting causing loss of attitude stability 
or control while EVA. 


Radiation 

The radiation threat affects EVA systems in two ways: 1) requires 

radiation attenuation capability to protect the EVA astronaut to allowable 
dosage and 2) depending on how well item 1 above is done, tne EVA astronaut 
cumulative dosage may dictate the astronaut time on EVA/time on station and 
mission scheduling. Additionally, the Incidence of solar flares may require 
EVA scheduling consideration such that the EVA astronaut has time to enter the 
space station safe haven or an external safe haven if available to the EVA 
astronaut within his Immediate work area. The warning time equals the 
from flare optical observatlon-to-flare/fluence arrival. The radiation issues 
are discussed further in Section 7, Volume II. 
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to 


Qut-of -Control 1VA/EVA Astronaut 

Sr 

«S»f.r I^SSI^JSS? of **• ”“ ulMy sys£em " re "“ ,reJ **» 

In advertent Operatio ns 

EVA operations, inherently, are high risk operations. Assessment of all 
Tetu!? tingency-operatlons Is designed to determine the Impact on EVA 
r£nn??* d +wi 9 r' The t n ^ ust *7 approach for mechanizing critical functions is 

SSSSZSS interfaces!** 61 * ° f fauU t0 ' erance the wSEffaJ* 

Lack of Crew Coordination 
Abandonment of Statio n 

Impacts EVA operations In the contingency area. 

Meteoroid Penetration/Pebris 

Vow*?? ‘"I®” 5 are a<i<*ress«d in detail in Sections 8 and 9 respectively In 

« asrr!«s n 

appears to dictate the need for a hard EVA suit system. 

Consumables Depletion 

reau1^°to S d«tlm^r'I C i Pa 5? d / Ctivity P r °J ect1cn and motion studies are 
soace stat?nn ete Thl ne s !! fe dist ances the EVA astronaut may operate from the 
IKJfnl* The n ! ed "V exist for an on-orblt/at-station refuel ina 

station’ dr1ves C the e ?Jitf5fV f / efue1in9 EVA s y stems external to the space 
In FY85.’ d 1 th in1tial desi 9 n con cepts of the advanced EMU to be studied 

Intrusion/Attack 


Not addressed In this study. 


Structural Erosion 


Whether it be from meteoroi d/debrls Impacts or f * otn erosion by atomic 
oxygen, the life of the EVA systems will be Impacted. Thp later phenomenon 
appears to be attitude and mater, al dependent. The erosion Impact per EVA Is 
not an Issue If the systems are properly inspected prior to use. The EVA 
system design definition will have to define Inspection techniques that will 
certify the EVA systems for each excursion. T he resultant Impact Is the cost 
of logistics to replace EVA system elements that have lost their structural 
Integrity. 

Orbit Decay 

This threat Is not expected to Impact EVA systems unless EVA excursions 
are required outside a reentering space station. Then the Issues would be 
Meteoroid/ Debris, Structural Erosion, and Temperature Extremes. 

Loss of Access to a Hatch 

This threat Issue is a design driver for habitats to be used by returning 
EVA astronauts and, except for suit system/hatch control interfaces, does not 
directly impact EVA systems. 

Temperature Extremes 

Time on EVA, astronaut orientation at the work station and consumable 
supply are factors In this threat. Nominal mission requirements plus 
reasonable contingency requirements will define the EVA system. The resultant 
design, when viewed with survivability outside the deorbiting space station, 
will subsequently define the worst case conditions under which an EVA 
astronaut can function safely. 

Debris 


See " Meteoroid Penetration/Debris 11 , in this section. 
Free Orbit 


This issue results when an EVA astronaut is thrust away from the space 
station. An orbit EVA-to-EVA rescue capability should be considered. 

External plug-ins for life support consumables or ways to "handle 1 the EVA 
astronaut would be required. Simple design issues - a handhold or sll' n the 
EVA suit (helmet?) so the disabled EVA astronaut can be "towed" to saft\j. 
Other considerations may Include the need for a rescue scooter to be available 
on-orbit. 

EVA THREAT SUMMARY 

The threats which Impact the EVA system and its operations are a microcosm 
of the threats of the Space Station Itself. The three most serious threats 
(Identical to those on the station) are: Injury /illness, debris and 
radiation. There are some scenarios of Injury which may impact the station 
design, especially the airlock. For example, a hypergollcally contaminated 
crewman would need a safe location In which decontamination Is possible 
without exposing the entire station environment. The next group of threats 
also appear to be strong discriminators biasing the selection toward a hard 
suit In the "soft-su1t"/"hard-su1t" Issue. These are: contamination 
(Internal to the EVA 
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suit), mechanical damage, and EVA suit damage from a grazing/coll Islon 

Cleaning and blslegieal decontamination, as well as the simplicity 

'™* b, » be tbe -* 

prebreath In ^ Mp { b,e i^ ^^^9^0 a° contlngenSlM 
prebreathing or extensive donning time. Second. y, mobility becomes a more 

hA?v l m nt Th? S<d ^ r ^ t1 2 n than on the Shuttle where the RMS could function as a 
backup. This study found that threats were more effectively addressable with 
the hard suit at a pressure of 8 psl or greater. y aaoressaoie with 
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EVA SUIT HISTORY 


In the early days of space flight, astronauts wore modified U.S. Navy 
full -pressure suits as a backup to the spacecraft's pressurization system. 

These garments would enable astronauts to breathe If the capsule lost air 
pressure, but they could not keep them alive in the severe environment of 
spaee. So the first astronauts were confined to cramped quarters, awaiting a 
suit that would let them step outside. 

The development of such a space suit was no simple task. In addition to 
supplying oxygen to astronauts leaving an orbiting spaceship, * must also 
protect them from the high-energy radiation of the sun. Moreover, the suit 
must prevent the astronaut from either frying or fre> ing In temperatures as 
high as 250°F on the side exposed to the sun and as low as -65°F on the side 
In the shadows. And If these were not problems enough for one piece of 
clothing, a space suit must be able to withstand micrometeorites, tiny 
particles whipping through space. Such a collision has not yet occurred, but 
If it did and a micrometeorite punctured an astronaut's suit, oxygen would 
leak from the suit and the astronaut would need to get inside quickly. 

A suit designed as part of the Gemini program solved these problems and 
allowed astronauts to emerge from the cocoon of their spacecraft to undertake 
extravehicular activity (EVA). This led to the development of a suit that 
permitted astronauts to walk on the surface of the moon. By the time of 
Skylab, astronauts were routinely leaving their orbital workshop to repair 
equipment, change film, and carry out a variety of EVAs. 

The suit designed for space-shuttle missions allows astronauts to do 
these jobs more readily and to perform other tasks that were never before 
possible. Technically referred to as the extravehicular mobility unit (EMU), 
the suit and life-support system provide astronauts with greater flexibility 
in their shoulders, arms, and hands. When a Skylab astronaut tried to pull 
film from a telescope mounted outside the spacecraft, the movements were stiff 
and awkward, as though he were wearing 20 layers of binding clothing. 

Improved joints with bearings and friction-resistant material allows Shuttle 
astronauts to remove film from a satellite with greater facility. Shuttle 
astronauts are handier in space — able to use a wrench more easily, for 
instance. The days when a space suit would be used in one mission and then 
displayed in a museum are gone. Shuttle EMU's are designed to be used again 
and again over a 15-year period. Rather than producing each suit specially to 
fit each astronaut, NASA now manufactures components in sizes ranging from 
extra small to extra large. No longer the beneficiaries of custom tailoring, 
shuttle astronauts must shop off the shelf choosing a pair of pants, for 
example, from a selection of six different sizes. When the mission is over, 
the suit is broken down into its various parts, cleaned, and readied for reuse. 

Unlike previous space flights, where space suits were required attire, 
shuttle flights call for astronauts to wear theirs only for extravehicular 
activity. Otherwise they will wear simple blue overalls. For an EVA, 
however, the astronaut first puts n a liquid cooling and ventilation garment 
that will dispose of the excess heat generated while working in a space suit. 
NASA quickly learned the importance of this article of clothing - several 
Gemini space walks had to be ended early because the astronauts became 
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overheated and exhausted. Developed for use In the Apollo program, the liquid 
cooling and ventilation garment Is a ene-piece, zippered suit that looks like 
rnes.i long Johns and contains about 300 feet of plastic tubing. By circulating 
cool water through this tubing, the garment can dispose of ?,Q0Q Btu's per 
hour, the amount of heat produced during strenuous exercise. The suit also 

collect the oxygen used to ventilate the body's surface 
and return It to the portable life-support system on the astronaut's back. 

„ . ? nc ^ tha11c l u J d cooling and ventilation garment is on, the astronaut is 
ready to don the wnlte outer suit that Is familiar from earlier space 

toSJim, dS?c?nn d d i* 1 ? n ' ,as s^nlficantly reduced the time astronauts need 
to spend dressing. It took an hour to put on the Apollo moon suits and 

life-support systems; It takes a shuttle astronaut 10 to It; minutes to put on 
an tmU. r 

First, the astronaut dons the lower-torso assembly, which looks like a 
baggy pair of pants with attached boots. The lower-torso assembly is 
constructed of nine layers of material: the Inner two, called the pressure- 
restraint garment, maintain the atmosphere Inside the suit; the outer seven, 
J he fj erma1 micrometeonte garment, protect the astronaut both from ’ 
m crometeontes and the extreme temperatures of space. An astronaut puts on 
the lower-torse assembly much the same way one dons a pair of pants on earth - 
except in space you can put on your pants two legs at a time. 

Second, the astronaut gets into the hard upper torso. This is a rigid, 
fiberglass shell that resembles a vest and has both sleeves and backpack 

atta ? h f d to 1 *- The har d upper torso is mounted to the 
a r l0 V L wa11 of *!*? vehicle. To put it on, the astronaut must squat down and 
J f" s1 1 de . u P» snaking the arms through the sleeves and putting the head out 

fock1ng k tlie n waist h ring tr0naUt th6n connects the u PP er and lower torsos by 


... i hlr ^’ *2® astronaut puts on gloves that attach by wrist connectors to 
fmm nl« eVeS ‘ Ttl0u 9 h jot custom-fitted, as they were for the Apollo suits, the 
EMU 9l°ves are more flexible. Spacesuit engineer Ronny Newman says that with 

f5Llatinn U m?t? V ?^f n astronaut could pick up a dime - with practice. An 
insulating mitt like a kitchen hot pad can be placed over the glove when the 
astronaut must handle hot objects. 

Finally, the astronaut puts on a helmet. Made of polycarbonate, a 
transparent Impact-resistant plastic, this is one piece of equipment that has 
remained relatively unchanged since the days of Apollo. The visor assembly, 
with adjustable eyeshades to block out sunlight, Is still placed over the * 
helmet to protect It from damage. If the sunlight becomes excessively strong, 
the ast-'onaut can pull down a special gold-plated visor that serves as a y 
one-way m.rror. 

Once Inside the EMU, the astronaut checks out the crucial life-supDort 
system. The backpack Is mounted to the suit so that all the oxygen and water 
hoses remain inside the hard upper torso. In this way, no external hoses can 
become tangled or snagged. The system contains lithium hydroxide canisters 
that remove carbon dioxide so astronauts can rebreathe exhaled air. There is 
also. a backup oxygen that, if the primary system fails, can provide oxygen for 
30 minutes, sufficient time for the astronaut to return to the Shuttle 
orbi ter. 


This sequence is shown in Figure o-1 . (306) 
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Without these joints, It would be virtually Impossible for the astronaut 
to do useful work. These special joints are located at the knees, wrists, 
shoulders, elbows, ankles, thlgTfs, and waist of the SSA. Normal body 
movements by the astronaut cause the suit joints to bend. This flexibility 
permits the astronaut te conserve his energy, reduce fatigue and to work for 
long periods of time, 

A typical cross-section of the SSA Is 11 layers deep consisting of; the 
Liquid Cooling Ventilation Garment (LCVG) (2 layers); pressure retention 
garment (2 layers); and the Thermal Micrometeoroid Garment (TMG) (7 layers). 
Simply stated, the LDVG maintains astronaut comfort, the pressure retention 
garment provides containment of the breathing air, and the TMG protects 
against the micrometeoroids which hit the suit, and Insulates the astronaut 
from the extreme temperatures of space. See Figure 6-2, Table 6-2. 


Table 6-2. EVA SUIT (SHUTTLE) 


Following are brief descriptions and Illustrations of the units that comprise 
the Spacesuit Assembly. (369) 

1. Communications Carrier Assembly (CCA) 

2. Hard Upper Torso Assembly (HUT) 

3. Arm Assembly 

4; Lower Torso Assembly (LTA) 

5. Glove Asembly 

6. Helmet Assembly 

7. Extravehicular Visor Assembly (EVVA) 

8. Liquid Cooling Ventilation Garment (LCVG) 

9. Urine Collection Device (UCD) 

10. Insult Drink Bag (IDB) 

1. Communications Carrier Assembly (CCA) - Figure 6-3 

The Communications Carrier is a skull cap that Interfaces with the 
Electrical Harness Assembly. It contains a microphone and earphones for voice 
communications. The skull cap Is made of teflon and nylon/lycra fabrics. 

2. Hard Upper Torso Assembly (HUT) - Figure 6-4 

The Hard Upper Torso is a vest-like rigid fiberglass shell which 
Incorporated provisions for Arm, LTA and Helmet attachment. A Water Line and 
Vent Tube Assembly is fastened to the shell Interior and Interfaces with the 
LSVG and the Life Support System (LSS). 

The main portion of the LSS, containing water and oxygen storage and 
circulation provisions, mounts on the back of the HUT, while the LSS controls 
mount on the front within easy reach of the astronaut. 

3. Arm Assembly - Figure 6-5 

The Arm Interfaces with the HUT by a ring that retains the Arm Scye 
Bearing In the HUT Glmbal opening. The upper and lower arm joints are 
separated by an arm bearing which allows lower arm rotation. The lower arm 
also provides for sizing adjustments and for qulck-dlsconnect/dlsconnect of 
the glove via a wrist disconnect. 
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S. HARD UMIR TORSO ASStMBLT (HUT) 

FIGURE 6-4 


S. ARM ASMMKt 

FIGURE 6-5 




4. Lower Torso Assembly (LTA) - Figure 6-6 

The Lower Torso Assembly of the spacesult consists of an Integrated Body 
Seal Closure, Waist, Waist Bearing, Leg, Thigh, Knee and Ankle Joints plus 
removal Boots. The LTA encloses the lower body and Interfaces with the HUT 
Vj* the Body seal closure. The flexible waist section and waist bearing 
afford the astronaut a large degree of movement about the waist e.g., bending 
and hip rotation. 


5. Glove Assembly - Figure 6-7 

The Glove is made up of a restraint and bladder encased in a TMG. The 
gloves protect the astronaut's wrists and hands and are attached to the 
spacesult arms at the wrist disconnects. The gloves Incorporate a rotary 
bearing to allow wrist rotation, a wrist joint to provide flexion/extension 
and fabric joints for thumbs and fingers, plus a hot pad for protection of the 
hand from extreme hot and cold extravehicular conditions. 

6. Helmet Assembly - Figure 6-8 

The Helmet Assembly consists of a transparent Shell, Neck Ring, Vent 
Pad, Purge Valve and an adjustable Valsalva device. The Helmet Is secured to 
the HUT and provides an unobstructed field of vision. Optical clarity of the 
transparent shell Is made possible by the use of rugged, impact resistant 
polycarbonate material. A vent assembly, bonded to the Inside rear of the 

polycarbonate shell, serves to diffuse the Incoming gas over the astronauts 
face. 


7. Extravehicular Visor Assembly (EVVA) - Figure 6-9 

The Extravehicular Visor Assembly is a llght-and heat-attenuating shell 
which fits over the Helmet Assembly. It Is designed to provide protection 
against micrometeoroid activity and accidental Impact damage, plus protect the 
crewman from solar radiation. 

A special gold coating gives the sun visor optical characteristics 
similar to those of a two-way mirror; It reflects solar heat and light, yet 
permits the astronaut to see. Adjustable eyeshades may be pulled down over 
the visor to provide further protection against sunlight and glare. 

8. Li 4-1 d Cooling Ventilation Garment (LCVG) - Figure 6-10 

The Liquid Cooling Ventilation Garment is a close-fitting undergarment 
covering the body torso and limbs. It incorporates a network of fine tubing 
that Is maintained in close contact with the astronauts skin by the outer 
layer of stretchable open fabric. The spacesult is so well Insulated that 
normal body heat maintains warmth, even on the cold, dark side of the 
spacecraft. However, cooling Is required, therefore water Is circulated 
through the LCVG tubing to remove excess body heat. Water flows through the 
various Inlets and return tubes and must be uninterrupted In order for the 
garment to be effective. The LCVG also uses ventilation ducting to return 
vent flow from the body extremities to the EMU Life Support System (LSS). 
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Urine Collection Device (UCD) - Figure 6-11 
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FIGURE 6-11 



10. INSUIT MINK BAG (101) 

FIGURE 6-1? 
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Figure 6-15 Sealed Bearing for Spacisuit Joints 
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Figure 6-13 High Pressure Suits 
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MINI -WORK STATION 


The Mini -Work Statl-on- (MWS) Is used to-tether an astronaut wearing his 
dr her Extravehicular Mobility Unit (Spacesult) at a worksite end to carry 
tools from the Shuttle tool stowage area to the work area. The MWS Is 
attached by the astronaut to- the front of the spacesult Hard Upper Torso, 
thereby making the MWS and all attached tools readily available for the 
astronaut to use when necessary. The MWS tether Is a 4-foot long, self- 
retractlng cord with a multipurpose end effector (connector) which allows the 
astronaut to easily attach the tether to circular sections (handrails, door 
drive linkages, etc*) or to flat pi ate . Tethered to a position, and with 

J2S?« i !Lr!2f!l*i the * a 5K 0T,aut c 2 n P*r form tasks in the Shuttle payload bay and 
remain relatively stationary. See Figure 6-21. 

TOOL CADDY 


Before leaving earth, the astronaut knows the specific tasks to be 
performed In space; Accordingly, the majority of the tools are grouped by the 
task to be performed. These groups of tools are placed In Tool Caddies which 
can be attached to the Mini-Work Station. Tools for emergencies, such as jam 
removal tools, are also placed In caddies. The Tool Caddy shell Is an 8-1 nch 
by 13-Inch stiffened fabric which folds over the tools, closes and seals with 
velcro. Each caddy Is attached to the MWS via a ring and pin while each tool 
Is attached to a 3-foot long tether on the caddy. See Figure 6-22. 

EMU TV CAMERA AND LIGHTS 

The EMU TV Camera and Lights are worn on the Spacesult Extravehicular 
Visor Assembly during EVA. The four lights provide the astronaut with the 
Illumination required for effective accomplishment of extravehicular tasks 
when In the shade or on a dark side portion of an orbit. The astronaut can 
select the number of bulbs Illuminated on either side of the helmet, l.e, 
none, one, or two on either side. The upper portion, or housing, of the 
assembly Is used to mount NASA's miniature TV camera. Also mounted In the 
housing Is an on/off switch, a small light (LED) for Indication of power on, 
and a small sliding knob for focusing the TV camera lens. The circular 
portion on top of the housing Is the antenna which transmits the picture to 
the orolter cabin, then to earth, thus providing the orblter cabin crewmembers 

and ground personnel with a duplicate of the EVA crewmember's view. See 
Figure o-23. 
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EVA PORTABLE FOOT RESTRAINT 

The EVA Portable Foot Restraint Is designed to provide restraint at the 
worksite during, certain EVA tasks where the astronaut Is required to use 
torque, which requires. In the weightless atmosphere of spaee.that the 
astronaut's feet be locked Into place. The restraint s long rod Is a 
telescoping boom which has a clamp which can be located at- any point along the 
boom* The telescoping boom and-elamp are normally mounted °P J t ^ e / orward 1 ^ d 
aft payload bay-bulkheads (walls). The platform. assembly, which is normally 
stowed In the tool stowage area, Is attached to the- boom clamp by the 
astronaut when Its use Is required. The platform assembly consists }J “ mav 
nl atfornr wi th foot restraint and tether attachment points. The platform may 
Berotated to allow the astronaut to be In nearly any position required. 

Figure 6-24. 



Figure 6-24 EVA Portable Foot Restraint 


MANNED MANEUVERING UNIT (MMU) 


The current-MMU Is a device designed primarily to enable the EVA 
astronaut to- maneuver, without the restriction of mere hand-over-hand 
translation. In and around-the vicinity of the Shuttle orblter up to a range 
of 300 ft. With a delta V capability of about 68 feet per second, the device 
provides transportation from shuttle to worksite, and attitude stabilization 
required to work at, or rlgldlze to the worksite. The MMU also provides a 
limited transport capability for4:ools and equipment. The ability to fly away 
from or around a vehicle allows a stable standoff position for photo 
documentation and general observation, or a closeup Inspection of all parts of 
the vehicle. 

MMU safety employs fully redundant fail-safe active subsystems for 
attitude control Including automatic attitude hold, electrical power, and 
propulsion, and Isolation valves providing Immediate thrust termination on 
either or both propulsion systems. One singe point failure inherent In any 
propulsion system Is line or tank rupture and venting, which on an MMU can 
result In uncontrolled propulsive effects. The requirement for active shuttle 
rescue reduces risk to an untethered astronaut but restricts both EVA and 
shuttle for timelines and propellant redllnes. Buddy system MMU rescue and 
propellant transfer improves MMU safety but has limited range. Advanced 
missions requiring greater flight distances and remote operations will also 
require greater reliability for control of failures and may Involve greater 
failure separation and controlled (zero thrust) failure-venting. When 
on-orbit facilities Include propellant storage and OMV transportation, MMU 
rescue will be viable for nearly any mission or activity. 

MMU performance for future missions will require additional capability 
necessary to support on-orbit assembly and servicing activities associated 
with space station construction and operation. Simple transportation of 
personnel will expand to transportation of larger more involved materials as a 
support to more complex EVA activities. Associated with this are requirements 
for greater propellant and delta V potential. As transportation of larger 
mass objects becomes a necessity, so will the ability to compensate for 
shifting center of gravities on MMU dynamics. Complicating this situation 
will remain the need for a non-contaminating propulsion system for the 
protection of sensitive equipment, scientific experiments an EVA crewmember 
himself, arising from the close proximity work an MMU will be required to 
perform. 


EVA ASSESSMENT 


Aggregate Issues Involving EVA must address not only the suit system but 
also the environment In which the suit system must function. These areas of 
concern Include: 


Task ^Assessment 
Task -Suit System Interface 
Suit System Logistics 
Ttan-Sul t System Interface 

Figure 6-25 shows the relationships of the EVA task elements. Implied 
are the function, threat,, application and Importance of logistics element In 
selecting what the EVA suited crewman Is to do, where he Is to do It and under 
what conditions. All of these elements contribute to EVA suit system design 
definition. 3 

Task Assessment 


The EVA/suit system exists to extend man's capabilities to function In 
Inhospitable environments. This could Include exploration, surveillance, 
fabrication, servicing, repair. Installation, transportation and rescue. Each 
of these tasks generates requirements on the man as well as the suit system. 
Each task must be assessed for threat Impact, Interface definition, logistics 
and procedures/requirements development. For Instance, In looking at the 
considerable functions for the EVA suited crewman one sees Issues that must be 
addressed. Table 6-3 relates functions to threats. Each of these threats 
must be assessed to determine 1) If adequate strategies are available to 
protect the crewman/equipment, 2) if contingencies can cause Inordinate risk 
exposure within the selected strategies and/or 3) if the candidate functions 
should be deleted from the EVA agenda. 

Task-Suit System Interfaces 

Similarly, as above, the Interface issues must address each planned EVA 
function and Its accompanying tools and equipment. The basic Issue 1$ the EVA 
suited crewman exiting a habitat. To accommodate the limited capabilities of 
the existing shuttle EVA suit, the habitat (orblter) has to lower Its Internal 
atmospheric pressure to reduce the suit-cabin delta pressure minimizing the 
crewman's time for prebreathing. A clear definition of this requirement was 
not Included In the orblter development specifications In 1972. 

Because of this oversight, the orbl ter/current EVA suit does not allow 
for Immediate egress of the EVA suited crewman without the risk of exposure to 
bends. That is, the lower limit of the orblter cabin pressure Is dictated by 
air mass/volume flow requirement to cool avionic equipment and the fire hazard 
exposure when the oxygen partial pressure Is Increased at the lower cabin 
pressures. At the present, 10.2 psla Is the minimum cabin pressure allowed In 
the orbit crew compartment. There are approaches being assessed to allow the 
space station to function with an 8 psl cabin so that existing soft-suit 
(4 psl) technology Is directly applicable for the next decade of space explor- 
ation. This seems counterproductive. It would appear, on the other hand, 
that developing a suit whose Internal pressure approaches 14.7 psl should be 
the goal to alleviate these suit/cabin delta pressure generated Issues. 
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Additional Interface Issues are function generated as noted In Table 
6-3. It can be seen that high risk tasks, that Is tasks that exposes the EVA 
suited crewman to catastrophic environments, may becum® candidates for 
automation or deletion as credible functions. These Issues are addressed by 
cost of robotics vs. risk to EVA suited crimen. Even If external tasks are 
assigned to robotics, the residual requirement remains to service and maintain 
the robotic systems. 

A key task=su1i system Intense Issue Is that of protection of the 
suited crewman from the environments expected in LEO and eventually GEO 
orbits. With radiation being the driver, consideration of a suit technology 
that allows ample attenuation of radiation to the crewman at higher and polar 
orbits seems mandatory. 

Suit System Logistic s 

This Issue may be the eventual driver to go to hard suit (non-cloth) 
elements, The present shuttle EVA suit requirements for maintenance, repair 
and refurbishment - unless the suit Inventoiy Is dramatically Increased - 
would make Its use In the planned space station Impractical, If possible. 
Maintenance, repair and refurbishment of the suit system in addition to 
on-orbit suit sizing and decontamination appear to be key design drivers for 
an EVA suit system that must function In an LEO, GEO and eventually a clslunar 
environment. These logistic requl rementi'- appear to grossly define a suit 
whose elements are readily assembled/di sasscmbled, have resistance to 
abrasion/erosion, are completely Interchangeable and are easily decontaminated 
as a whole or as separate elements. 

Man-Suit System Interface 

In suit design, the physical and anthropomretric needs are addressed. 

In practice, the latter may suffer from logistics (sized spares) problems, not 
necessarily from lack of design attention. Basic Issues at the man-suit 
Interface are those issues that become fatigue generators. The soft suit 
technology appears to be pressure limited as Increases In pressure at or above 
the 5 psl level appear to Immobilize the suited crewman. This Is either In 
motion of arms and legs or gloved digits. 

The MASA-ARC AX-2 and AX-3 suit developments address the arm and leg 
mobility such that reach and dynamic motion appears to be Independent of 
pressure. 

End effectors, whether they are gloves or robotic extensions of the 
suited crewman need further design assessment. Experimental hard/soft gloves 
and gloves studies continue. End effectors that are essentially manipulator 
systems operating replaceable specialized tools by an ungloved hand within the 
suit pressure shell could be considered after the function assessment 
determines which discrete tasks the EVA crewman Is obligated to perform. 

Some minor problems have occurred In the existing shuttle EVA suit with 
mounting of the communication system elements. There may be an advantage to 
helmet mounting communication gear vs. crewman donned soft cap mounting. 
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EVA ISSUES 
Tool Problems 


EVA tasks In the past have been hampered by the difference In what was 

n« P t?J e ?? ed *l n tra1n1n 9 and what realized In actual on-orbit operations. 

On STS-11 the crew commented that the equipment they trained on was not the 
configuration as the actual article. Additionally, the Solar Max flight, 
STS-13, presented the problem where the EVA tool -to-Solar Max Interfaclno 
Ktt # / ere ha, JP®red by Interference. It has been determined that the 1 9 
Interface on the ^olar Max was not as reflected on the drawing used in EVA 
tool design and task planning. 

EV A Suit Capabilit y 

m o T ? e pr j S ^« t , VA su1t rec l u1res a reduced cabin pressure and prebreathing; 
10.2 psla and 40 minutes. The EVA suit used on the Space Station should 
support Immediate egress from the normal cabin pressure (l.e., 8 psla or 
greater). Donning and doffing capability of the suit should be Investigated. 

Exposure to Radiatio n 

A long term Issue, not directly addressed, Is the Impact of EVA crew 
member exposure to background radiation exclusive of solar flares. The 
relationship of time on EVA must be related to the total rem dose per flight 
per quarter, per year and per lifetime. This assumes solar flare escape to a 
storm cellar within 20-minutes Is possible. The "storm cellar" may be 
station mounted or free-orbit located adjacent to areas of E^A tasks a 
distance away from the space station. 

Fatigue 

Some of the EVA's have been fatigue generators, perhaps this Is from 
unexpected contingencies, and <ack of upper torso muscle-tone maintenance 
deficiencies. Also, soft suit tendencies toward Immobilization at higher 
?I»5? ures c ? n 9 enerate fatigue. Present exercise techniques operate on the 
cardiovascular system and the lower torso muscular system; a whole body, or at 
least optimization of upper torso/arms exercise should be considered. 

EVA Support 

EVA ! invo ]ye two crewmen outside and one or more Inside. Space 
Station EVA support may limit the number and length of EVA segments because of 

the non-EVA time required for Internal activity as well a. space station 
maintenance. 

EVA Lighting 


. . ^®r® a shade-side lighting problem without an atmosphere to scatter 
M: eS ? pec1a l attent1on * as It Is difficult to determine how 
1 ? ht1ng Js needed during tests on the ground. The high contrast 
light/shade environment In space Is not easy to demonstrate on the ground. 
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Restraint 


Limiting restraints to the foot 
position of micro-gravity. 


jack may be overlooking the normal 


fetal 


Contingency Operations 


EVA operational planning should postulate more contingencies to 
operations" 3 ” 3nd expendab1e capability exists to support off -design 


ensure 


EVA Rescue 


Figure, 6-26 and 6-27 show an EVA rescue simulation whereas one crewman 
Is returning an Incapacitated crewman to the space station. There mav be an 
advantage to considering an external "handle" on the EVAsul t - perhaps on^he 
helmet to allow one-hand tow of an Incapacitated crewmember. 

EVA Suit Maintenance 

Present suit and backpack (life support system) maintenance and 
staffing d ° eS n0t Seei " compatib1e with Panned space station operations and 
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7. SAFE HAVEN 


ear1iest e datS C sSLihAH HaVen " 1n the manned space pr -°9 ram predates-the 
searched out in support of this contract study: clrca-1968. A 

?ii e a place where a crew can retire when faced with a threat not 

WiateTy control! able in the local volume. More ?San a place! a safe haven 
nf * be ca P ab11 *ty to k^ep the crew alive for a specified period 

2 #?s^£ , sA?ks b -s 2 , 2 =j« 


m c-ains-jft'sji; rs 


to either 

iS.nif“ e .a e crew *, F ° r bbe low Earth orbit space station concept 
imestigated as part of this study, there are fn essence four sSSce stations- 
1) the build-up station, 2) the 28-day station, 3) the 90-dav station ana a\’ 
£• ' S : y T s *« tio "- The Pwtld-up Station^ is defined as thfinufl? ^UMoI 

SSS ffX'SaSMl S^tT^Si. MT^can be 

JfgSSt-p^fc^SUSS ^nS’SSe 1 !.^ ^ t 4S2^iS3 s i^{SS! 1n T jU crew 

removal "from oJh?t°!!t!ti the p ^ oje 5 ted 11fe and saf e disposal station, that Is, 
removal from orbit station, A safe haven capability must exist in each of 

cnfr?f^ pa ?? s 5 a J! ons as defined. The twenty -eight day station is the one that 
specifically defines the requirements of the safe haven capability? 

OPERATIONAL NEED FOR A SAFE HAVEN 

The safe haven capability may better be defined by looklnq at its need 
tjjt precipitate the need for a space station safl haven 

crevfwi^have to'mHK ?^T. S V°"? ’? F1gure 7 ->- f*«d "Uh a threat, the 

Th? ve i b0 .» ma *? th s lofl'lcal assessment concerning its course of 
action. This logic flow is no different than those used In eveSdS life and 
particularly for operations that may contain inherent dangers, 

if.** in JPfestlng to note that the second level threat addressed is 
orb!tal°sec2o enS ^ J,S ? fS * ts ^ a ^ h ^^* a ^°^ F ^^ Into^the space^tation*** 6 

to* d?i“ we configuration. 1nt ° tota ' 5pace stJt1on «P ab "W. I»9fhs 

Continuing with Figure 7-1, once evacuation is deemed necessary the 

aUernat1ve° nt !n U lonHrIn th t b ° 0 5 e ® pin 9 tasks typical of any emergency’ 
a i t f r ^ tlve ‘ In lookin 9 a t what the crew must do, Figure 7-1 also indicates 
what the space station capability must be to support Its emergency ' w4i,es 
operations Each task, and this listing may notbe com^Je^lles the need 

SrdSaJe to do a sS? mP 1Sh th * aCt1 ° n specif1ed and also bave the SecessJry 


IM.'I T.n * 


r a. '*i'. 151 , \ 'iK 


NOT FH.Mm 
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SAFE HAVEN REQUIREMENTS 


ann^Ji 6 !^ J 1 ^ v ^ 1ou f wa ^ s *° define the safe haven requirements. One 

to P sat?£fJ S thU nfll 06 T he +H e f d +!l nd i a ?? ther 1s t0 d ? f1ne th ® equipment required 
to satisfy the need. Ia that the latter approaeh is contingent on having a 

cn n *hf*'Ti!'" space th ® approach used here will be to define the needs 

f? *5®* J}y be app^ed to many configuration approaches. Essentially, 
the Space Station safe haven capability must Include the following: y 

current* threat!* rem ° Ve ^ frm CUrrent threat and/or threat adsi "9 from the 


- !???* includ ® pintles to provide and maintain minimum human 

comforts until rescue Is effected or until the crew can return to 
normal /non -threatened operations. 


*• to* 1 1nclud ® facilities to prevent a deteriorating medical 
situation during period of use. s 


4. Must not require the use of EVA to 
safe haven/rescue vehicle. 


transport personnel 


to and from 


. 3: K S . hou1d *3* c °" sid ®^ any design concept that requires detachment 

from the basic station (Free Orbit). 

6, Must not require any significant reaction time to activate and 
occupy the safe haven. 

7. Must provide continuous communications capability with the ground, 
the basic station and potential rescue vehicles. 

THREAT/SAFE HAVEN RELATIONSHIPS 

Of the twenty-three threats defined during this study, sixteen are felt 
to be drivers for safe haven capability definition. Figure 7-2 relates the 
safe haven design requirements to the threats expected to be encountered. As 
tan be seen, the safe haven design requirements are a microcosm of space 
station design requirements. Because of this, It would be prudent to look at 

™ sta £i 1 n a L a wh ° le when assessing the safe haven capability. Except for 
consumables, the safe haven capability could be integrated Into the overall 
space station capability. 


SAFE HAVEN OPTIONS 

In the same way that the threats drive design capabilities, the same 
design capabilities are related to safe haven options. Figure 7-3 addresses 
eight options. The Orblter Is addressed as the ninth option primarily to 
support safe haven capability for the build-up phase of the space station. 

Once an on-orbit safe haven capability is established, It will be able to 

28-day station, the 90-day station and the 15-year station. Or at 
least its design planning should Include the specific requirements for each of 

f* a **° n Included In Figure 7-3 are relative cost estimates to 

achieve each of the safe haven capability options. 
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Figure 7-2 Safe Haven Threat Related Design Requirements 
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Figure 7-3 Safe Haven Options as Impacted by Design Requirements 
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In reviewing the relative cost options shown In Figure 7-3 It becomes 
apparent that -radiation protection against the solar flare Is going to be a 
dlffleult design Issue to resolve. Deleting that requirement, there remain 
three-options of equal relative cost,. accepting the fact that a storm cellar 
Is mandatory. Of these three, the externally mounted Inflatable Is not a 
normally usable. volume. There may be other logistical -problems with the 
externally -inflatable safe haven. However, the remaining two are credible 
approaches to the problem. The multi -use area safe haven Implies one volume 
usable for the purpose of a safe haven but used for other purposes as well, 
not being a dedicated safe haven. The other half of the station Implies a 
safe haven capability In two separate volumes. 

A review of reliability redundancy requirements, Vol. IV-Appendlx E, 
Indicates that redundancy Issues tend to support the "other half of station" 
safe haven capability concept. 

The unresolved Issue, however Is how the "storm cellar" Is going to be 
Integrated Into the space station design. Figure 7-4 proposes a possible 
approach based on the "other half station" safe haven capability. It should 
be noted that the storm cellar Is a single failure point. What makes It a 
storm cellar Is 1) necessary shielding from the most severe radiation threat, 

2) minimum hygiene facilities and minimum life sustenance capability for up to 
five days. It could be possible to designate the storm cellar volume as the 
volume which Is surrounded by the potable and gray water tanks, or tanks that 
could have the water pumped to surround the storm cellar area. Another 
approach Is to encase the crew In lead ponchos... or any combination of these 
approaches. If the storm cellar environment can be created dynamically. It 
could be an Integral part of each or both safe haven half station capabilities. 


i 



Figure 7-4 Safe-Haven/Storm Cellar Relationships 
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8. AREAS FOR FURTHER EMPHASIS 


Table 8-1 summarizes the areas In this study Identified as needing 
further emphasis. Similarly, Table 8-2 notes those areas to be looked Into as 
a result of the safety Impact on human factors assessment. 

Some of the Items may be underway or have been completed. The listing 
In no way comments on completness or status of the related Items. Rather, the 
list Indicates that within the data reviewed there seemed to be areas of data 
deficiency. 

TABLE 8-1 AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS 

THREAT 

1. Airlock for lab module vs. dual egress study 

Contaml nation 


Loss of Access to Hatch 

2. Airlock for lab module vs. delta P pressure 

Contaml nation 

curtain study 


3. External stowage of EVA suit (cost Impacts) 

Contaml nation 

vs. Internal contamination 


4. Free flyer for "dirty" payloads vs. on- 

Contaml natl on 

board decontamination/clean room costs 


5. Up-front costs vs. program costs for 

Contamination 

regenerative ECLSS or a consumable-using 

Stores Depletion 

ECLSS 


6. User safety requlrments documents vs. 

Program 

user safety ombudsman 


7. Refurb module on orbit vs. return and refurb 

Program 

8. User guide to automate vs. manual approach 

Program 

to experiments/processes 


9. Testing one-of-a-kind payload vs. 

Program 

recommendl ng encapsul atl on 


10. On-board material /Inventory control vs. 

Corrosion 

on-ground control with data link (expanded 

Contaml nation 

MATCO-R I -System) 

Inadvertent Ops 


Stores Depletion 


11. Costs of measuring Internal contamination 
vs. risk of accepting contamination 


Program 


12. Dedicated (module) vs. centralized ECLSS 


Contamination 

Loss of Pressurization 


13. Relaxed contaminant allowables per zone 
(hazard critical /contamination sensitive) 
vs. minimum contamination allowables for 
entire station 


Contamination 
Injury/111 ness 



TABLE 8-1 (CONT'O) AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS THREAT 

14. Threshold Level Values (TLV's) for 24-hour 
station vs. TLV's for 8-hour work week 
regimes 

Injury/Illness 

15. EVA dedicated module (w/decontaml nation 
airlock ty VS * decontamination * n dedicated 

Contamination 

16. Level of material assessment and control 
for station vs. user 

Program 

17. Cost of medical care on-orbit vs. medical 
screening (appendectomies, radiation 
max -out, etc.) 

Injury/Illness 

18. Realtime contamination monitoring vs. 1 

snap shot" monitoring j 

Contamination 

19. Classified Materials Controls vs. ! 

Industrially Sensitive" material control 

Lack of Crew Coordination 

20. High altitude (Debris/Radiation) vs. 
lower altitude (oxygen bombardment) 

Debris, Radiation, 
Structural Erosion, 
Contamination 

21. Re-orienting station mass vs. providing 
shielding from solar flares 

Radiation 

22. Optimum repair level: Unit vs. Component 

| 

Program 

23. Wal k-around bottles vs. plug-in 0 2 system | 

Loss of Pressurization 
Contamination 

24. Synerglstlcally develop barrier system 
(module pressure wall) to accommodate 
debris, meteoroids, radiation, oxygen 
bombardment, pressure redundancy, shrapnel 
shielding and structural Inspection/repair 

Radiation, Debris, 
Meteoroid Reduction, 
Loss of Pressure, 
Mechanical Damage, 
Grazing/Collision, 
Leakage 

25. Develop body vital signs monitoring system 
for each crew member with data aggregated 
for control panel display or down listing 

Injury/Illness 

| 

26. Define medical facilities for build-up. 1 

Initial and growth stations 1 

Injury/Illness 
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TABLE 8-1 (CONT'D) 


AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS 


27. Provide orbit changing maneuvering capability! 

of station to avoid debris, Including I 

determining cycle-rate and total propulsion 
reqUI rements 

28. Develop on-going International protocols 
for traffic control In space. Expand 
NORADS capability to Identify debris down 
to Xmm diameter 

29. Define fragmentation dispersion of pressure 
vessels In a vacuum: calculated dlsperson 
or actual dlsperson (291) 

30. Definition of blastwave characteristics for | 

typical gas storage vessels (291) J 

31. Better definitions of fragment Impact I 

effects on a variety of strutures and I 

faculties typical of those occurring In 
aerospace vehicle explosions (291) 

32. Central llzed/Decentrall zed work stations 
(station subsystem maintenance, EVA/EMU 
maintenance and storage, module repair/ 
refurb, user equipment maintenance and 
repair) 

33. EVA suit vs. chamber/alrlock for hyperbaric 
treatment of the bends 

34. EVA suit external surface material 
compatibility or selected overgarments 

35. Small tool "pass through" compartment to 
support EVA vs. cost of module or airlock 
press/depress 

36. Remote actuating of airlock outer hatch vs. - 
manual actuation by EVA crewman 

37. Assessment of personal and equipment 
restraints and tether 

38. Minimize types and sizes of fastening devices 
(weight vs. logistics Impact) 

39. Free flying (permanently co-orbiting station) 
EVA tool box vs. space station mounted tool 
box 


THREAT 

Debrl s 
Debrl s 

Explosion 

Explosion 

Explosion 

Lack of Crew Coordination 

Injury/Illness 
Contaml nation 
Stores Depletion 

Injury/Illness 

Lack of Crew Coordination 

Stores Depletion 


Injury/Illness 




TABLE 8-1 (CONT'D) AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS 


40. Clear definition of EVA Ionizing radiation 
Impact to crewmember and shielding 
capability of EVA suit materials 

41. Experiments to Investigate and determine 
properties of combustion and propogatlon of 
fire In Micro g. 


THREAT 

Injury/Illness 

Fire 
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TABLE 8-2 


AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS 


HUMAN FACTORS ISSUE 


]_. Determine degree of automation needed and/or I 
desired for Interactive crisis management i 

2. Expand and disseminate anthropometric data | 
on the micro-gravity "neutral body" position | 

3. Further develop the software architecture I 
and approaches to allow editing, recombln- j 
atlon and understandable annunciation of I 
many data elements to support real time I 
decision making under conditions of stress 

4. Develop testing/screening techniques that 
can Identify or relate subject's ability to 
function under nigh stress conditions 

5. As a part of space station systems 

engineering and integration, develop a 
"crisis management" overlay of all space 
station signals and data interchange net- 
works to help coordinate aggregation of 
annuniations/controlling signals necessary | 

for crisis management (emergency or I 

contingency operations) 

6. Polarized shades vs. opaque shades 

7. Allow personalization of cabins or work 
areas (photos, cartoons, books, etc.) 

Including decor options 

8. Define crewmember psychological and 
physiological screening elements to support 
functioning In a long term confined/isolated 
envi roment 

9. Include architectural /interior design 
consultation in habitable module design 

10. Consider possibility of single, large-volume 
space (Inflatable or structurally built-up 
to provide "open" environment for crew on 
growth station 

11. Develop standard decision-making techniques 
to be used for Insulation vs. Isolation of 
noise 


Crisis Management 
Crisis Management 
Crisis Management 

Crisis Management 
Crisis Management 


Conf 1 nement/Isol atlon 

Conf 1 nement/ I sol ati on 

Conf 1 nement/Isol ati on 
Confinement/ I sol ati on 

Acoustics 


TABLE 8-2 (CGNT'D) 


AREAS FOR FURTHER STUDY 


AREA OF RECOMMENDED FUTURE EMPHASIS 


12. Specify the need for a maximum allowable 
NC-acoustlc requirement per module (work 
a ,re a Habitable area) and* require acoustic 
subsystem Input apportionment within each ’ 
module. Include a qualification test to 
apportioned acoustical requirements 

13. Provide for standard hand signals for 
envlTOnment 0n,nUnjCatl0n untenable noise 

14. Define/provide personal storage space 

15. Orient crew toward "non-violation" of 
personal territory 

16. Include personal consumables (toilet 

articles, etc. ) in a master logistics 
planning list 3 

17. Determine method of measuring reasonable 
personal "space bubble" - flat vs the 
sphere within which an Individual feels 
threatened. Then, screen for crew who can 
function within this volume 

18. Screen crewmembers for prej -trices and 
openess to differing cultural norms 

19. Provide education/orientation for 
crewmembers regarding cross-cultural issues 
and problems 

20. Train crewmembers to utilized group dynamics 
conflicts^ potent1a1 be bavor1al protocol 

21 * il 8 f r !}!! res o r t, develop chemical /physical 
restraint system for out-of-control 
crewmembers 

22 ‘ t«k Ca if? U!o3 U ! e tas $ s for crew vs - common 
wasK f all -module assignment 

23 - |S"deflnls ,S ' Si,ecia ' 1st crew training 
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HUMAN FACTORS ISSUE 
Acoustics 

Acoustics 

Territorial Issues 
Territorial Issues 

Territorial Issues 
Territorial Issues 

Behavorlal Protocols 
Behavorlal Protocols 

Behavorlal Protocols 

Behavorlal Protocols 

Scheduling 

Scheduling 


TAHLt 8-2 (CONT'D) 


AREAS FOR FURTHER SYUi'Y 


AREA OF RECOMMENDED FUTURE EMPHASIS 


24. Less than 90 day recycles vs. oil-station | 
expendable costs and crew personal equipment 
needed to support extended stay 

25. Consider adequate capability for storage 
inventorying, handling and disposition of 
servicing, maintenance, plain garbage, and 
consumables for cleaning and repair 

26. Identify family of cleaning/disinfecting 
chemicals compatible with selected ECLSS 
approach 

27. Train crewmembers In all phases of station 
tasks, housekeeping 

28. Define minimum crew cleanliness requirements 
(this may be an Intra -cultural Issue) 

29. Define requirements (total volume and flow 
rates) for potable and non-potable water 

30. Consulting with astronauts, develop a 
standard for clothing options and hygiene 
consumables options 

31. Consider scheduling hygiene (common) I 

equipment ; 

32. Define a private electronic center for each | 
cabin to Include at least an entertainment | 
center ( visual /aural ), a private television | 
link to Earth, background mood generator 
(white noise) 

33. When teaming, screen crewmembers for 
compatible recreation interests 

34. Prepare specification for recreation 
equipment/kit pertaining to safety - with 
options for person 

35. Develop realistic allowable radiation close 
rate tables for part of body for EVA, 
flight, quarter, year and whole life 

36. Develop color coding system for all tubing, 
piping, emergency passageway, damage control 
equipment and tasks Including "warnings", 
"cautions", and "notes" 


HUMAN FACTURS ISSUE 
Schedul Ing 

Cleaning/Disinfecting 

Cl eanl ng/01 si nfectl ng 

Cl eanl ng/DI si nfectl ng 
Cl eanl ng/DI si nfectl ng 
Cl eanl ng/DI si nfectl ng 
Hygiene 

Hygiene 

Recreation 

Recreation 

Recreation 

Violation of Safety 

Violation of Safety 
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AREAS FOR FURTHER STUDY 




TABLE 8-2 (CONT'D) 


AREA OF RECOMMENDED FUTURE EMPHASIS 


HUMAN FACTORS ISSUE 


37. Clearly Identify safety critical segments Violation of Safety 

of tasks to Insure mandatory compliance 

(hardware, procedural software) 

38. Prepare task flow charts that Identify as Violation of Safety 

many contingency operations as possible to 

determine response need 

39. Screen all carry-on personal equipment 
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